Cisco Thousandeyes Enterprise Agent
Recent Cisco Thousandeyes Enterprise Agent Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 2024-01-10 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | January 10, 2024 |
| 2023-08-17 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | August 17, 2023 |
| 2023-08-17 | Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability | August 17, 2023 |
By the Year
In 2024 there have been 1 vulnerability in Cisco Thousandeyes Enterprise Agent with an average score of 8.0 out of ten. Last year Thousandeyes Enterprise Agent had 2 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Thousandeyes Enterprise Agent in 2024 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2024 is greater by 1.35.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 1 | 8.00 |
| 2023 | 2 | 6.65 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Thousandeyes Enterprise Agent vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Cisco Thousandeyes Enterprise Agent Security Vulnerabilities
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could
CVE-2024-20277
8 - High
- January 17, 2024
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of user-supplied input for the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP packet to the affected device. A successful exploit could allow the attacker to execute arbitrary commands and elevate privileges to root.
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could
CVE-2023-20224
7.8 - High
- August 16, 2023
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation of user-supplied CLI arguments. An attacker could exploit this vulnerability by authenticating to an affected device and using crafted commands at the prompt. A successful exploit could allow the attacker to execute arbitrary commands as root. The attacker must have valid credentials on the affected device.
Argument Injection
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could
CVE-2023-20217
5.5 - Medium
- August 16, 2023
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing certain commands using sudo. A successful exploit could allow the attacker to view arbitrary files as root on the underlying operating system. The attacker must have valid credentials on the affected device.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Cisco Thousandeyes Recorder or by Cisco? Click the Watch button to subscribe.
