CVE-2024-20391 - Vulnerability Details

A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device.

No CVSS v4.0

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cisco	Secure Client
Microsoft	Windows

Configuration 1 [-]

AND

cpe:2.3:a:cisco:secure_client:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ

History

Tue, 22 Jul 2025 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft Microsoft windows
CPEs		cpe:2.3:a:cisco:secure_client:::::::: cpe:2.3:o:microsoft:windows:-:::::::*
Vendors & Products		Microsoft Microsoft windows

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-05-15T17:24:34.138Z

Updated: 2024-08-01T21:59:42.903Z

Reserved: 2023-11-08T15:08:07.659Z

Link: CVE-2024-20391

Vulnrichment

Updated: 2024-08-01T21:59:42.903Z

NVD

Status : Analyzed

Published: 2024-05-15T18:15:10.153

Modified: 2025-07-22T18:02:45.250

Link: CVE-2024-20391

Redhat

No data.

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20391", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.659Z", "datePublished": "2024-05-15T17:24:34.138Z", "dateUpdated": "2024-08-01T21:59:42.903Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T17:24:34.138Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.\r\n\r This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device."}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Client", "versions": [{"version": "4.9.00086", "status": "affected"}, {"version": "4.9.01095", "status": "affected"}, {"version": "4.9.02028", "status": "affected"}, {"version": "4.9.03047", "status": "affected"}, {"version": "4.9.03049", "status": "affected"}, {"version": "4.9.04043", "status": "affected"}, {"version": "4.9.04053", "status": "affected"}, {"version": "4.9.05042", "status": "affected"}, {"version": "4.9.06037", "status": "affected"}, {"version": "4.10.00093", "status": "affected"}, {"version": "4.10.01075", "status": "affected"}, {"version": "4.10.02086", "status": "affected"}, {"version": "4.10.03104", "status": "affected"}, {"version": "4.10.04065", "status": "affected"}, {"version": "4.10.04071", "status": "affected"}, {"version": "4.10.05085", "status": "affected"}, {"version": "4.10.05095", "status": "affected"}, {"version": "4.10.05111", "status": "affected"}, {"version": "4.10.06079", "status": "affected"}, {"version": "4.10.06090", "status": "affected"}, {"version": "4.10.07061", "status": "affected"}, {"version": "4.10.07062", "status": "affected"}, {"version": "4.10.07073", "status": "affected"}, {"version": "4.10.08025", "status": "affected"}, {"version": "4.10.08029", "status": "affected"}, {"version": "5.0.00238", "status": "affected"}, {"version": "5.0.00529", "status": "affected"}, {"version": "5.0.00556", "status": "affected"}, {"version": "5.0.01242", "status": "affected"}, {"version": "5.0.02075", "status": "affected"}, {"version": "5.0.03072", "status": "affected"}, {"version": "5.0.03076", "status": "affected"}, {"version": "5.0.04032", "status": "affected"}, {"version": "5.0.05040", "status": "affected"}, {"version": "5.1.0.136", "status": "affected"}, {"version": "5.1.1.42", "status": "affected"}, {"version": "5.1.2.42", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Missing Authentication for Critical Function", "type": "cwe", "cweId": "CWE-306"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ", "name": "cisco-sa-secure-nam-priv-esc-szu2vYpZ"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-secure-nam-priv-esc-szu2vYpZ", "discovery": "EXTERNAL", "defects": ["CSCwj48522"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20391", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-15T18:58:26.955767Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.01095"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.02028"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.03047"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.03049"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.04043"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.04053"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.05042"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.06037"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.00093"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.01075"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.02086"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.03104"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.04065"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.04071"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05085"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05095"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05111"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.06079"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.06090"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07061"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07062"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07073"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.08025"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.08029"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00238"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00529"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00556"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.01242"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.02075"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.03072"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.03076"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.04032"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.05040"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.00086"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.0.136"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.1.42"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.2.42"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:40:05.799Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.903Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ", "name": "cisco-sa-secure-nam-priv-esc-szu2vYpZ", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-20391 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2023-11-08T15:08:07.659Z (string)

datePublished : 2024-05-15T17:24:34.138Z (string)

dateUpdated : 2024-08-01T21:59:42.903Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-05-15T17:24:34.138Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device. (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Secure Client (string)

versions : [ »

0 : { »

version : 4.9.00086 (string)

status : affected (string)

}

1 : { »

version : 4.9.01095 (string)

status : affected (string)

}

2 : { »

version : 4.9.02028 (string)

status : affected (string)

}

3 : { »

version : 4.9.03047 (string)

status : affected (string)

}

4 : { »

version : 4.9.03049 (string)

status : affected (string)

}

5 : { »

version : 4.9.04043 (string)

status : affected (string)

}

6 : { »

version : 4.9.04053 (string)

status : affected (string)

}

7 : { »

version : 4.9.05042 (string)

status : affected (string)

}

8 : { »

version : 4.9.06037 (string)

status : affected (string)

}

9 : { »

version : 4.10.00093 (string)

status : affected (string)

}

10 : { »

version : 4.10.01075 (string)

status : affected (string)

}

11 : { »

version : 4.10.02086 (string)

status : affected (string)

}

12 : { »

version : 4.10.03104 (string)

status : affected (string)

}

13 : { »

version : 4.10.04065 (string)

status : affected (string)

}

14 : { »

version : 4.10.04071 (string)

status : affected (string)

}

15 : { »

version : 4.10.05085 (string)

status : affected (string)

}

16 : { »

version : 4.10.05095 (string)

status : affected (string)

}

17 : { »

version : 4.10.05111 (string)

status : affected (string)

}

18 : { »

version : 4.10.06079 (string)

status : affected (string)

}

19 : { »

version : 4.10.06090 (string)

status : affected (string)

}

20 : { »

version : 4.10.07061 (string)

status : affected (string)

}

21 : { »

version : 4.10.07062 (string)

status : affected (string)

}

22 : { »

version : 4.10.07073 (string)

status : affected (string)

}

23 : { »

version : 4.10.08025 (string)

status : affected (string)

}

24 : { »

version : 4.10.08029 (string)

status : affected (string)

}

25 : { »

version : 5.0.00238 (string)

status : affected (string)

}

26 : { »

version : 5.0.00529 (string)

status : affected (string)

}

27 : { »

version : 5.0.00556 (string)

status : affected (string)

}

28 : { »

version : 5.0.01242 (string)

status : affected (string)

}

29 : { »

version : 5.0.02075 (string)

status : affected (string)

}

30 : { »

version : 5.0.03072 (string)

status : affected (string)

}

31 : { »

version : 5.0.03076 (string)

status : affected (string)

}

32 : { »

version : 5.0.04032 (string)

status : affected (string)

}

33 : { »

version : 5.0.05040 (string)

status : affected (string)

}

34 : { »

version : 5.1.0.136 (string)

status : affected (string)

}

35 : { »

version : 5.1.1.42 (string)

status : affected (string)

}

36 : { »

version : 5.1.2.42 (string)

status : affected (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Missing Authentication for Critical Function (string)

type : cwe (string)

cweId : CWE-306 (string)

}

]

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

name : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

}

]

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

attackVector : PHYSICAL (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

discovery : EXTERNAL (string)

defects : [ »

0 : CSCwj48522 (string)

]

}

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-20391 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-05-15T18:58:26.955767Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.01095 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.02028 (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.03047 (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.03049 (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.04043 (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.04053 (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.05042 (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.06037 (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.00093 (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.01075 (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.02086 (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.03104 (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.04065 (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.04071 (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05085 (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05095 (string)

}

]

defaultStatus : unknown (string)

}

16 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05111 (string)

}

]

defaultStatus : unknown (string)

}

17 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.06079 (string)

}

]

defaultStatus : unknown (string)

}

18 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.06090 (string)

}

]

defaultStatus : unknown (string)

}

19 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07061 (string)

}

]

defaultStatus : unknown (string)

}

20 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07062 (string)

}

]

defaultStatus : unknown (string)

}

21 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07073 (string)

}

]

defaultStatus : unknown (string)

}

22 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.08025 (string)

}

]

defaultStatus : unknown (string)

}

23 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.08029 (string)

}

]

defaultStatus : unknown (string)

}

24 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00238 (string)

}

]

defaultStatus : unknown (string)

}

25 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00529 (string)

}

]

defaultStatus : unknown (string)

}

26 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00556 (string)

}

]

defaultStatus : unknown (string)

}

27 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.01242 (string)

}

]

defaultStatus : unknown (string)

}

28 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.02075 (string)

}

]

defaultStatus : unknown (string)

}

29 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.03072 (string)

}

]

defaultStatus : unknown (string)

}

30 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.03076 (string)

}

]

defaultStatus : unknown (string)

}

31 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.04032 (string)

}

]

defaultStatus : unknown (string)

}

32 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.05040 (string)

}

]

defaultStatus : unknown (string)

}

33 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.00086 (string)

}

]

defaultStatus : unknown (string)

}

34 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.0.136 (string)

}

]

defaultStatus : unknown (string)

}

35 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.1.42 (string)

}

]

defaultStatus : unknown (string)

}

36 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.2.42 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-06-04T17:40:05.799Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T21:59:42.903Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

name : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ", "name": "cisco-sa-secure-nam-priv-esc-szu2vYpZ", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:59:42.903Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20391", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-05-15T18:58:26.955767Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.01095"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.02028"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.03047"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.03049"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.04043"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.04053"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.05042"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.06037"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.00093"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.01075"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.02086"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.03104"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.04065"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.04071"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05085"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05095"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.05111"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.06079"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.06090"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07061"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07062"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.07073"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.08025"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.10.08029"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00238"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00529"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.00556"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.01242"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.02075"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.03072"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.03076"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.04032"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.0.05040"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "4.9.00086"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.0.136"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.1.42"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:*"], "vendor": "cisco", "product": "secure_client", "versions": [{"status": "affected", "version": "5.1.2.42"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-15T19:02:43.350Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"defects": ["CSCwj48522"], "advisory": "cisco-sa-secure-nam-priv-esc-szu2vYpZ", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Client", "versions": [{"status": "affected", "version": "4.9.00086"}, {"status": "affected", "version": "4.9.01095"}, {"status": "affected", "version": "4.9.02028"}, {"status": "affected", "version": "4.9.03047"}, {"status": "affected", "version": "4.9.03049"}, {"status": "affected", "version": "4.9.04043"}, {"status": "affected", "version": "4.9.04053"}, {"status": "affected", "version": "4.9.05042"}, {"status": "affected", "version": "4.9.06037"}, {"status": "affected", "version": "4.10.00093"}, {"status": "affected", "version": "4.10.01075"}, {"status": "affected", "version": "4.10.02086"}, {"status": "affected", "version": "4.10.03104"}, {"status": "affected", "version": "4.10.04065"}, {"status": "affected", "version": "4.10.04071"}, {"status": "affected", "version": "4.10.05085"}, {"status": "affected", "version": "4.10.05095"}, {"status": "affected", "version": "4.10.05111"}, {"status": "affected", "version": "4.10.06079"}, {"status": "affected", "version": "4.10.06090"}, {"status": "affected", "version": "4.10.07061"}, {"status": "affected", "version": "4.10.07062"}, {"status": "affected", "version": "4.10.07073"}, {"status": "affected", "version": "4.10.08025"}, {"status": "affected", "version": "4.10.08029"}, {"status": "affected", "version": "5.0.00238"}, {"status": "affected", "version": "5.0.00529"}, {"status": "affected", "version": "5.0.00556"}, {"status": "affected", "version": "5.0.01242"}, {"status": "affected", "version": "5.0.02075"}, {"status": "affected", "version": "5.0.03072"}, {"status": "affected", "version": "5.0.03076"}, {"status": "affected", "version": "5.0.04032"}, {"status": "affected", "version": "5.0.05040"}, {"status": "affected", "version": "5.1.0.136"}, {"status": "affected", "version": "5.1.1.42"}, {"status": "affected", "version": "5.1.2.42"}]}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ", "name": "cisco-sa-secure-nam-priv-esc-szu2vYpZ"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.\r\n\r This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-306", "description": "Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-05-15T17:24:34.138Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20391", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:59:42.903Z", "dateReserved": "2023-11-08T15:08:07.659Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-05-15T17:24:34.138Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

name : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-01T21:59:42.903Z (string)

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-20391 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-05-15T18:58:26.955767Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.01095:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.01095 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.02028:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.02028 (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.03047:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.03047 (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.03049:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.03049 (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.04043:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.04043 (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.04053:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.04053 (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.05042:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.05042 (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.06037:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.06037 (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.00093 (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.01075 (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.02086 (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.03104 (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.04065 (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.04071 (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05085 (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05095 (string)

}

]

defaultStatus : unknown (string)

}

16 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.05111 (string)

}

]

defaultStatus : unknown (string)

}

17 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.06079 (string)

}

]

defaultStatus : unknown (string)

}

18 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.06090 (string)

}

]

defaultStatus : unknown (string)

}

19 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07061 (string)

}

]

defaultStatus : unknown (string)

}

20 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07062 (string)

}

]

defaultStatus : unknown (string)

}

21 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.07073 (string)

}

]

defaultStatus : unknown (string)

}

22 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.08025 (string)

}

]

defaultStatus : unknown (string)

}

23 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.10.08029 (string)

}

]

defaultStatus : unknown (string)

}

24 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00238 (string)

}

]

defaultStatus : unknown (string)

}

25 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00529 (string)

}

]

defaultStatus : unknown (string)

}

26 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.00556 (string)

}

]

defaultStatus : unknown (string)

}

27 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.01242 (string)

}

]

defaultStatus : unknown (string)

}

28 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.02075 (string)

}

]

defaultStatus : unknown (string)

}

29 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.03072 (string)

}

]

defaultStatus : unknown (string)

}

30 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.03076 (string)

}

]

defaultStatus : unknown (string)

}

31 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.04032 (string)

}

]

defaultStatus : unknown (string)

}

32 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.05040 (string)

}

]

defaultStatus : unknown (string)

}

33 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:4.9.00086:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.00086 (string)

}

]

defaultStatus : unknown (string)

}

34 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.0.136 (string)

}

]

defaultStatus : unknown (string)

}

35 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.1.42 (string)

}

]

defaultStatus : unknown (string)

}

36 : { »

cpes : [ »

0 : cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:* (string)

]

vendor : cisco (string)

product : secure_client (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.1.2.42 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-05-15T19:02:43.350Z (string)

}

title : CISA ADP Vulnrichment (string)

}

]

cna : { »

source : { »

defects : [ »

0 : CSCwj48522 (string)

]

advisory : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.8 (number)

attackVector : PHYSICAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Secure Client (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.9.00086 (string)

}

1 : { »

status : affected (string)

version : 4.9.01095 (string)

}

2 : { »

status : affected (string)

version : 4.9.02028 (string)

}

3 : { »

status : affected (string)

version : 4.9.03047 (string)

}

4 : { »

status : affected (string)

version : 4.9.03049 (string)

}

5 : { »

status : affected (string)

version : 4.9.04043 (string)

}

6 : { »

status : affected (string)

version : 4.9.04053 (string)

}

7 : { »

status : affected (string)

version : 4.9.05042 (string)

}

8 : { »

status : affected (string)

version : 4.9.06037 (string)

}

9 : { »

status : affected (string)

version : 4.10.00093 (string)

}

10 : { »

status : affected (string)

version : 4.10.01075 (string)

}

11 : { »

status : affected (string)

version : 4.10.02086 (string)

}

12 : { »

status : affected (string)

version : 4.10.03104 (string)

}

13 : { »

status : affected (string)

version : 4.10.04065 (string)

}

14 : { »

status : affected (string)

version : 4.10.04071 (string)

}

15 : { »

status : affected (string)

version : 4.10.05085 (string)

}

16 : { »

status : affected (string)

version : 4.10.05095 (string)

}

17 : { »

status : affected (string)

version : 4.10.05111 (string)

}

18 : { »

status : affected (string)

version : 4.10.06079 (string)

}

19 : { »

status : affected (string)

version : 4.10.06090 (string)

}

20 : { »

status : affected (string)

version : 4.10.07061 (string)

}

21 : { »

status : affected (string)

version : 4.10.07062 (string)

}

22 : { »

status : affected (string)

version : 4.10.07073 (string)

}

23 : { »

status : affected (string)

version : 4.10.08025 (string)

}

24 : { »

status : affected (string)

version : 4.10.08029 (string)

}

25 : { »

status : affected (string)

version : 5.0.00238 (string)

}

26 : { »

status : affected (string)

version : 5.0.00529 (string)

}

27 : { »

status : affected (string)

version : 5.0.00556 (string)

}

28 : { »

status : affected (string)

version : 5.0.01242 (string)

}

29 : { »

status : affected (string)

version : 5.0.02075 (string)

}

30 : { »

status : affected (string)

version : 5.0.03072 (string)

}

31 : { »

status : affected (string)

version : 5.0.03076 (string)

}

32 : { »

status : affected (string)

version : 5.0.04032 (string)

}

33 : { »

status : affected (string)

version : 5.0.05040 (string)

}

34 : { »

status : affected (string)

version : 5.1.0.136 (string)

}

35 : { »

status : affected (string)

version : 5.1.1.42 (string)

}

36 : { »

status : affected (string)

version : 5.1.2.42 (string)

}

]

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

name : cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-306 (string)

description : Missing Authentication for Critical Function (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2024-05-15T17:24:34.138Z (string)

}

cveMetadata : { »

cveId : CVE-2024-20391 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-01T21:59:42.903Z (string)

dateReserved : 2023-11-08T15:08:07.659Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2024-05-15T17:24:34.138Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_client:*:*:*:*:*:*:*:*", "matchCriteriaId": "4FF362C4-2803-4CF9-83BE-34722F69E3E0", "versionEndExcluding": "5.1.3.62", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.\r\n\r This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device."}, {"lang": "es", "value": "Una vulnerabilidad en el m\u00f3dulo Network Access Manager (NAM) de Cisco Secure Client podr\u00eda permitir que un atacante no autenticado con acceso f\u00edsico a un dispositivo afectado eleve privilegios al SYSTEM. Esta vulnerabilidad se debe a la falta de autenticaci\u00f3n en una funci\u00f3n espec\u00edfica. Un exploit exitoso podr\u00eda permitir al atacante ejecutar c\u00f3digo arbitrario con privilegios de SYSTEM en un dispositivo afectado."}], "id": "CVE-2024-20391", "lastModified": "2025-07-22T18:02:45.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "psirt@cisco.com", "type": "Secondary"}]}, "published": "2024-05-15T18:15:10.153", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:cisco:secure_client:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4FF362C4-2803-4CF9-83BE-34722F69E3E0 (string)

versionEndExcluding : 5.1.3.62 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A2572D17-1DE6-457B-99CC-64AFD54487EA (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en el módulo Network Access Manager (NAM) de Cisco Secure Client podría permitir que un atacante no autenticado con acceso físico a un dispositivo afectado eleve privilegios al SYSTEM. Esta vulnerabilidad se debe a la falta de autenticación en una función específica. Un exploit exitoso podría permitir al atacante ejecutar código arbitrario con privilegios de SYSTEM en un dispositivo afectado. (string)

}

]

id : CVE-2024-20391 (string)

lastModified : 2025-07-22T18:02:45.250 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : PHYSICAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.9 (number)

impactScore : 5.9 (number)

source : psirt@cisco.com (string)

type : Secondary (string)

}

]

}

published : 2024-05-15T18:15:10.153 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-nam-priv-esc-szu2vYpZ (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-306 (string)

}

]

source : psirt@cisco.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

Metrics

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object