CVE-2024-20371

Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability

Medium · published November 6, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. 

This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.8th percentile
Published
2024-11-06T16:28Z
EPSS history
Timeline
  • 06 NOV 16:28Z
    Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability
    cvelistv5