CVE-2024-20394

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability i

Severity
Medium 5.5
CVSS 3.1
Adjacent, local or physical access what this means
Exploited
Not listed
EPSS
0.001
3.2th percentile
Discovered by
Vendor
Vendor-published field
Published
May 15, 2024
Assigned by cisco

Description

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could exploit this vulnerability by sending an HTTP request to the targeted service. A successful exploit could allow the attacker to cause a DoS condition by stopping the Network Agent Service on the local device.

Weakness: CWE-20

Affected products

Vendor Product Category Matched by
Cisco Cisco AppDynamics Other Products cna-assigner
Vendor-reported products (1)
  • Cisco · Cisco AppDynamics

Vendor advisory

cisco-sa-appd-netvisdos-9zNbsJtK

Cisco AppDynamics Network Visibility Service Denial of Service Vulnerability

Cisco’s rating: Medium (advisory CVSS 5.5) · Published May 15, 2024

Bug ID: CSCwh65251

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?