CVE-2024-20394

Medium

Description

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could exploit this vulnerability by sending an HTTP request to the targeted service. A successful exploit could allow the attacker to cause a DoS condition by stopping the Network Agent Service on the local device.

SeverityMedium
CVSS5.5
Exploit probability—
ProductCisco Appdynamics
PublishedMay 15, 2024
First seenMay 15, 2024

How to fix

Update
  • cisco appdynamics24.4.0 or later

Affected products

ProductAffected versionsFixed in
cisco appdynamicsv < 24.4.024.4.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2024-20394 · Cisco Appdynamics · Dark Radar