Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2024-20399)

[Eyal Estrin]

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP

https://www.sygnia.co/threat-reports-and-advisories/china-nexus-threat-group-velvet-ant-exploits-cisco-0-day/

https://therecord.media/cisco-velvet-ant-hackers-china

https://www.bleepingcomputer.com/news/security/cisco-warns-of-nx-os-zero-day-exploited-to-deploy-custom-malware/

Eyal Estrin

CISSP, CCSP, CISM, CISA, CDPSE, CCSK

Blog: https://security-24-7.com  | Books: https://amzn.to/3xMI4Ak | https://bit.ly/4cyxaA6

Twitter: @eyalestrin | Mastodon: @eyale...@mastodon.social