Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-20320 Details

Description

A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System (NCS) 540 Series and 5700 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of arguments that are included with the SSH client CLI command. An attacker with low-privileged access to an affected device could exploit this vulnerability by issuing a crafted SSH client command to the CLI. A successful exploit could allow the attacker to elevate privileges to root on the affected device.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ssh-privesc-eWDMKew3	CVE	Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ssh-privesc-eWDMKew3	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-266	Incorrect Privilege Assignment	[email protected]

Affected Products

Product	Versions
cisco ios xr	7.2.1 7.2.2 7.3.1 7.3.2 7.3.3
CPE cpe:2.3:o:cisco:ios_xr:7.2.1:::::::* cpe:2.3:o:cisco:ios_xr:7.2.2:::::::* cpe:2.3:o:cisco:ios_xr:7.3.1:::::::* cpe:2.3:o:cisco:ios_xr:7.3.2:::::::* cpe:2.3:o:cisco:ios_xr:7.3.3:::::::* cpe:2.3:o:cisco:ios_xr:7.3.5:::::::* cpe:2.3:o:cisco:ios_xr:7.3.15:::::::* cpe:2.3:o:cisco:ios_xr:7.4.1:::::::* cpe:2.3:o:cisco:ios_xr:7.4.2:::::::* cpe:2.3:o:cisco:ios_xr:7.5.1:::::::* cpe:2.3:o:cisco:ios_xr:7.5.2:::::::* cpe:2.3:o:cisco:ios_xr:7.5.3:::::::* cpe:2.3:o:cisco:ios_xr:7.5.4:::::::* cpe:2.3:o:cisco:ios_xr:7.5.5:::::::* cpe:2.3:o:cisco:ios_xr:7.6.1:::::::* cpe:2.3:o:cisco:ios_xr:7.6.2:::::::* cpe:2.3:o:cisco:ios_xr:7.7.1:::::::* cpe:2.3:o:cisco:ios_xr:7.7.2:::::::* cpe:2.3:o:cisco:ios_xr:7.7.21:::::::* cpe:2.3:o:cisco:ios_xr:7.8.1:::::::* cpe:2.3:o:cisco:ios_xr:7.8.2:::::::* cpe:2.3:o:cisco:ios_xr:7.9.1:::::::* cpe:2.3:o:cisco:ios_xr:7.9.2:::::::* cpe:2.3:o:cisco:ios_xr:7.9.21:::::::* cpe:2.3:o:cisco:ios_xr:7.10.1:::::::* Remediation No remediation found in references.
cisco ios xrd control plane	All versions
CPE cpe:2.3:a:cisco:ios_xrd_control_plane:::::::: Remediation No remediation found in references.
cisco ios xrd vrouter	All versions
CPE cpe:2.3:a:cisco:ios_xrd_vrouter:::::::: Remediation No remediation found in references.
cisco 8011-4g24y4h-i	All versions
CPE cpe:2.3:h:cisco:8011-4g24y4h-i:-:::::::* Remediation No remediation found in references.
cisco 8101-32fh	All versions
CPE cpe:2.3:h:cisco:8101-32fh:-:::::::* Remediation No remediation found in references.
cisco 8101-32fh-o	All versions
CPE cpe:2.3:h:cisco:8101-32fh-o:-:::::::* Remediation No remediation found in references.
cisco 8101-32h-o	All versions
CPE cpe:2.3:h:cisco:8101-32h-o:-:::::::* Remediation No remediation found in references.
cisco 8102-28fh-dpu-o	All versions
CPE cpe:2.3:h:cisco:8102-28fh-dpu-o:-:::::::* Remediation No remediation found in references.
cisco 8102-64h	All versions
CPE cpe:2.3:h:cisco:8102-64h:-:::::::* Remediation No remediation found in references.
cisco 8102-64h-o	All versions
CPE cpe:2.3:h:cisco:8102-64h-o:-:::::::* Remediation No remediation found in references.
cisco 8111-32eh-o	All versions
CPE cpe:2.3:h:cisco:8111-32eh-o:-:::::::* Remediation No remediation found in references.
cisco 8122-64eh-o	All versions
CPE cpe:2.3:h:cisco:8122-64eh-o:-:::::::* Remediation No remediation found in references.
cisco 8122-64ehf-o	All versions
CPE cpe:2.3:h:cisco:8122-64ehf-o:-:::::::* Remediation No remediation found in references.
cisco 8201	All versions
CPE cpe:2.3:h:cisco:8201:-:::::::* Remediation No remediation found in references.
cisco 8201-24h8fh	All versions
CPE cpe:2.3:h:cisco:8201-24h8fh:-:::::::* Remediation No remediation found in references.
cisco 8201-32fh	All versions
CPE cpe:2.3:h:cisco:8201-32fh:-:::::::* Remediation No remediation found in references.
cisco 8201-32fh-o	All versions
CPE cpe:2.3:h:cisco:8201-32fh-o:-:::::::* Remediation No remediation found in references.
cisco 8202	All versions
CPE cpe:2.3:h:cisco:8202:-:::::::* Remediation No remediation found in references.
cisco 8202-32fh-m	All versions
CPE cpe:2.3:h:cisco:8202-32fh-m:-:::::::* Remediation No remediation found in references.
cisco 8212-48fh-m	All versions
CPE cpe:2.3:h:cisco:8212-48fh-m:-:::::::* Remediation No remediation found in references.
cisco 8404	All versions
CPE cpe:2.3:h:cisco:8404:-:::::::* Remediation No remediation found in references.
cisco 8501-sys-mt	All versions
CPE cpe:2.3:h:cisco:8501-sys-mt:-:::::::* Remediation No remediation found in references.
cisco 8608	All versions
CPE cpe:2.3:h:cisco:8608:-:::::::* Remediation No remediation found in references.
cisco 8700	All versions
CPE cpe:2.3:h:cisco:8700:-:::::::* Remediation No remediation found in references.
cisco 8711-32fh-m	All versions
CPE cpe:2.3:h:cisco:8711-32fh-m:-:::::::* Remediation No remediation found in references.
cisco 8712-mod-m	All versions
CPE cpe:2.3:h:cisco:8712-mod-m:-:::::::* Remediation No remediation found in references.
cisco 8804	All versions
CPE cpe:2.3:h:cisco:8804:-:::::::* Remediation No remediation found in references.
cisco 8808	All versions
CPE cpe:2.3:h:cisco:8808:-:::::::* Remediation No remediation found in references.
cisco 8812	All versions
CPE cpe:2.3:h:cisco:8812:-:::::::* Remediation No remediation found in references.
cisco 8818	All versions
CPE cpe:2.3:h:cisco:8818:-:::::::* Remediation No remediation found in references.
cisco ncs 540-12z20g-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540-12z20g-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540-12z20g-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540-12z20g-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540-24q2c2dd-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540-24q2c2dd-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 540-24q8l2dd-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540-24q8l2dd-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 540-24z8q2c-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540-24z8q2c-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 540-28z4c-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540-28z4c-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540-28z4c-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540-28z4c-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540-6z14s-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540-6z14s-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540-6z18g-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540-6z18g-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540-6z18g-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540-6z18g-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540-acc-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540-acc-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 540-fh-agg	All versions
CPE cpe:2.3:h:cisco:ncs_540-fh-agg:-:::::::* Remediation No remediation found in references.
cisco ncs 540-fh-csr-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540-fh-csr-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-12z16g-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540x-12z16g-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-12z16g-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-12z16g-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-16z4g8q2c-a	All versions
CPE cpe:2.3:h:cisco:ncs_540x-16z4g8q2c-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-16z4g8q2c-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-16z4g8q2c-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-16z8q2c-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-16z8q2c-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-4z14g2q-a	All versions
CPE cpe:2.3:h:cisco:ncs_540x-4z14g2q-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-4z14g2q-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-4z14g2q-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-6z18g-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540x-6z18g-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-6z18g-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-6z18g-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-8z16g-sys-a	All versions
CPE cpe:2.3:h:cisco:ncs_540x-8z16g-sys-a:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-8z16g-sys-d	All versions
CPE cpe:2.3:h:cisco:ncs_540x-8z16g-sys-d:-:::::::* Remediation No remediation found in references.
cisco ncs 540x-acc-sys	All versions
CPE cpe:2.3:h:cisco:ncs_540x-acc-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 57b1-5dse-sys	All versions
CPE cpe:2.3:h:cisco:ncs_57b1-5dse-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 57b1-6d24-sys	All versions
CPE cpe:2.3:h:cisco:ncs_57b1-6d24-sys:-:::::::* Remediation No remediation found in references.
cisco ncs 57c1-48q6-sys	All versions
CPE cpe:2.3:h:cisco:ncs_57c1-48q6-sys:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Aug 5, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Mar 13, 2024	New CVE Received	[email protected]

CVE-2024-20320 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation