{"uuid": "fdd5691d-8848-44f9-8c3c-4f8c26829202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20399", "type": "exploited", "source": "https://t.me/theninjaway1337/1656", "content": "Cisco NX-OS Zero-Day Command Injection Flaw Under Active Attack\n\nA critical vulnerability in the Command Line Interface (CLI) of\u00a0Cisco NX-OS\u00a0Software is currently under active exploitation, allowing attackers to execute arbitrary commands as root on affected devices.\n\nThis zero-day flaw, identified as CVE-2024-20399, poses a significant threat to network security, particularly for organizations utilizing Cisco\u2019s Nexus and MDS series switches.\n\nThe vulnerability arises from insufficient validation of arguments passed to specific configuration CLI commands.\n\nhttps://cybersecuritynews.com/cisco-nx-os-zero-day-flaw", "creation_timestamp": "2024-07-07T16:55:36.000000Z"}