VulnSocial

CVE-2024-20316Active Exploitation(cisco / ios_xe)

LOWCVSS 5.3 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for cisco ios_xe systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device.

cisco CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-390

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ios_xe

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
cisco
Products
ios_xe

160 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-11: 1Active Exploitation · 2026-09-11: 109-11
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows three distinct threat clusters exploited CVE-2024-20079 and CVE-2024-20316 to compromise Cisco FMC devices, then used them as pivot points for credential harvesting and lateral movement across enterprise networks. Runtime segmentation could have limited the blast radius of these management plane compromises. #ZeroTrust #CloudSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/cisco-fmc-cve-2026-20079-qilin-sandworm-2026

    Post summary

    The analysis reports that attackers are actively exploiting CVE-2024-20079 and CVE-2024-20316 against Cisco FMC devices to pivot for credential harvesting and lateral movement; no PoC, exploit code, patch, or technical depth is disclosed.

    0000069
    2.0K followersView on X
CPE platform detail160 entries

160 of 160 entries

PartVendorProductVersionTarget SWTarget HW
OSciscoios_xe16.10.1--
OSciscoios_xe16.10.1a--
OSciscoios_xe16.10.1b--
OSciscoios_xe16.10.1e--
OSciscoios_xe16.10.1s--
OSciscoios_xe16.10.2--
OSciscoios_xe16.10.3--
OSciscoios_xe16.11.1--
OSciscoios_xe16.11.1a--
OSciscoios_xe16.11.1b--
OSciscoios_xe16.11.1s--
OSciscoios_xe16.11.2--
OSciscoios_xe16.12.1--
OSciscoios_xe16.12.10--
OSciscoios_xe16.12.10a--
OSciscoios_xe16.12.11--
OSciscoios_xe16.12.1a--
OSciscoios_xe16.12.1c--
OSciscoios_xe16.12.1s--
OSciscoios_xe16.12.1t--
OSciscoios_xe16.12.2--
OSciscoios_xe16.12.2a--
OSciscoios_xe16.12.2s--
OSciscoios_xe16.12.3--
OSciscoios_xe16.12.3a--
OSciscoios_xe16.12.3s--
OSciscoios_xe16.12.4--
OSciscoios_xe16.12.4a--
OSciscoios_xe16.12.5--
OSciscoios_xe16.12.5a--
OSciscoios_xe16.12.5b--
OSciscoios_xe16.12.6--
OSciscoios_xe16.12.6a--
OSciscoios_xe16.12.7--
OSciscoios_xe16.12.8--
OSciscoios_xe16.12.9--
OSciscoios_xe16.3.1--
OSciscoios_xe16.3.10--
OSciscoios_xe16.3.11--
OSciscoios_xe16.3.1a--
OSciscoios_xe16.3.2--
OSciscoios_xe16.3.3--
OSciscoios_xe16.3.4--
OSciscoios_xe16.3.5--
OSciscoios_xe16.3.5b--
OSciscoios_xe16.3.6--
OSciscoios_xe16.3.7--
OSciscoios_xe16.3.8--
OSciscoios_xe16.3.9--
OSciscoios_xe16.4.1--
OSciscoios_xe16.4.2--
OSciscoios_xe16.4.3--
OSciscoios_xe16.5.1--
OSciscoios_xe16.5.1a--
OSciscoios_xe16.5.1b--
OSciscoios_xe16.5.2--
OSciscoios_xe16.5.3--
OSciscoios_xe16.6.1--
OSciscoios_xe16.6.10--
OSciscoios_xe16.6.2--
OSciscoios_xe16.6.3--
OSciscoios_xe16.6.4--
OSciscoios_xe16.6.4a--
OSciscoios_xe16.6.5--
OSciscoios_xe16.6.5a--
OSciscoios_xe16.6.6--
OSciscoios_xe16.6.7--
OSciscoios_xe16.6.8--
OSciscoios_xe16.6.9--
OSciscoios_xe16.7.1--
OSciscoios_xe16.7.2--
OSciscoios_xe16.7.3--
OSciscoios_xe16.8.1--
OSciscoios_xe16.8.1a--
OSciscoios_xe16.8.1b--
OSciscoios_xe16.8.1c--
OSciscoios_xe16.8.1s--
OSciscoios_xe16.8.2--
OSciscoios_xe16.8.3--
OSciscoios_xe16.9.1--
OSciscoios_xe16.9.1a--
OSciscoios_xe16.9.1b--
OSciscoios_xe16.9.1s--
OSciscoios_xe16.9.2--
OSciscoios_xe16.9.3--
OSciscoios_xe16.9.3a--
OSciscoios_xe16.9.4--
OSciscoios_xe16.9.5--
OSciscoios_xe16.9.5f--
OSciscoios_xe16.9.6--
OSciscoios_xe16.9.7--
OSciscoios_xe16.9.8--
OSciscoios_xe17.1.1--
OSciscoios_xe17.1.1a--
OSciscoios_xe17.1.1s--
OSciscoios_xe17.1.1t--
OSciscoios_xe17.1.3--
OSciscoios_xe17.10.1--
OSciscoios_xe17.10.1a--
OSciscoios_xe17.10.1b--
OSciscoios_xe17.11.1--
OSciscoios_xe17.11.1a--
OSciscoios_xe17.11.99sw--
OSciscoios_xe17.12.1--
OSciscoios_xe17.12.1a--
OSciscoios_xe17.12.2--
OSciscoios_xe17.12.2a--
OSciscoios_xe17.2.1--
OSciscoios_xe17.2.1a--
OSciscoios_xe17.2.1r--
OSciscoios_xe17.2.1v--
OSciscoios_xe17.2.2--
OSciscoios_xe17.2.3--
OSciscoios_xe17.3.1--
OSciscoios_xe17.3.1a--
OSciscoios_xe17.3.2--
OSciscoios_xe17.3.2a--
OSciscoios_xe17.3.3--
OSciscoios_xe17.3.4--
OSciscoios_xe17.3.4a--
OSciscoios_xe17.3.4b--
OSciscoios_xe17.3.4c--
OSciscoios_xe17.3.5--
OSciscoios_xe17.3.5a--
OSciscoios_xe17.3.5b--
OSciscoios_xe17.3.6--
OSciscoios_xe17.3.7--
OSciscoios_xe17.3.8--
OSciscoios_xe17.3.8a--
OSciscoios_xe17.4.1--
OSciscoios_xe17.4.1a--
OSciscoios_xe17.4.1b--
OSciscoios_xe17.4.2--
OSciscoios_xe17.4.2a--
OSciscoios_xe17.5.1--
OSciscoios_xe17.5.1a--
OSciscoios_xe17.6.1--
OSciscoios_xe17.6.1a--
OSciscoios_xe17.6.2--
OSciscoios_xe17.6.3--
OSciscoios_xe17.6.3a--
OSciscoios_xe17.6.4--
OSciscoios_xe17.6.5--
OSciscoios_xe17.6.5a--
OSciscoios_xe17.6.6--
OSciscoios_xe17.6.6a--
OSciscoios_xe17.7.1--
OSciscoios_xe17.7.1a--
OSciscoios_xe17.7.1b--
OSciscoios_xe17.7.2--
OSciscoios_xe17.8.1--
OSciscoios_xe17.8.1a--
OSciscoios_xe17.9.1--
OSciscoios_xe17.9.1a--
OSciscoios_xe17.9.2--
OSciscoios_xe17.9.2a--
OSciscoios_xe17.9.3--
OSciscoios_xe17.9.3a--
OSciscoios_xe17.9.4--
OSciscoios_xe17.9.4a--

Explore more

Back to dashboardcisco CVEsios_xe vulnerabilities