How severe is CVE-2024-20141?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.8 out of 10.

What type of vulnerability is CVE-2024-20141?

This is classified as CWE-123, which is a common weakness in software security.

CVE-2024-20141

MEDIUM Year: 2024

CVSS v3 Score

6.8

Medium

Weakness Type

CWE-123

View all →

Vulnerability Description

In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291402; Issue ID: MSV-2073.

CVE-2018-15375

MEDIUM

CVSS:6.7(Medium)

A vulnerability in the embedded test subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers could allow an authenticated, local attacker to write arbitrary values ...

CWE-1232018

CVE-2018-15376

MEDIUM

CVSS:6.7(Medium)

CWE-1232018

CVE-2021-1390

MEDIUM

CVSS:6.7(Medium)

A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulner...

CWE-1232021

CVE-2021-1520

MEDIUM

CVSS:6.7(Medium)

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with ro...

CWE-1232021

CVE-2024-20118

MEDIUM

CVSS:6.7(Medium)

In mms, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not need...

CWE-1232024