{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-08T17:46:21.251","vulnerabilities":[{"cve":{"id":"CVE-2024-20483","sourceIdentifier":"psirt@cisco.com","published":"2024-09-11T17:15:13.213","lastModified":"2024-10-03T01:44:17.827","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager MongoDB instance to perform command injection attacks on the PON Controller container and execute arbitrary commands as root.\r\n\r\nThese vulnerabilities are due to insufficient validation of arguments that are passed to specific configuration commands. An attacker could exploit these vulnerabilities by including crafted input as the argument of an affected configuration command. A successful exploit could allow the attacker to execute arbitrary commands as root on the PON controller."},{"lang":"es","value":"Varias vulnerabilidades en el software Cisco Routed PON Controller, que se ejecuta como un contenedor Docker en hardware compatible con el software Cisco IOS XR, podrían permitir que un atacante remoto autenticado con privilegios de nivel de administrador en el administrador de PON o acceso directo a la instancia MongoDB del administrador de PON realice ataques de inyección de comandos en el contenedor del controlador de PON y ejecute comandos arbitrarios como superusuario. Estas vulnerabilidades se deben a una validación insuficiente de los argumentos que se pasan a comandos de configuración específicos. Un atacante podría aprovechar estas vulnerabilidades al incluir una entrada manipulada como argumento de un comando de configuración afectado. Una explotación exitosa podría permitir al atacante ejecutar comandos arbitrarios como superusuario en el controlador de PON."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:24.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BCE8E968-111F-4F57-93D3-E509AB540B87"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:24.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B342A550-8600-45CF-8B9A-530770C9A0F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D64E1C4D-46B0-4A18-B8EE-BEA732CBF1F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:24.2.11:*:*:*:*:*:*:*","matchCriteriaId":"11288A28-F0CF-4FEC-A0B7-3D93866F01FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:24.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3FD120B9-0671-473C-8420-872E5BB9933F"}]}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ponctlr-ci-OHcHmsFL","source":"psirt@cisco.com","tags":["Vendor Advisory"]}]}}]}