Cisco Thousandeyes Enterprise Agent vulnerabilities

3 CVEs affecting Cisco Thousandeyes Enterprise Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20277, published 2024-01-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-20277, published 2024-01-17. High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command…
CVE-2023-20224, published 2023-08-16. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected…
CVE-2023-20217, published 2023-08-16. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges on an affected device. …