Cisco plugs zero-day abused by suspected Chinese cyber spies
Briefly

CVE-2024-20399 vulnerability in Cisco Nexus switches allows local attackers to run commands as root due to insufficient validation, requiring admin privileges for exploitation.
Successful exploitation by Velvet Ant underscores the severity, even with a moderate rating, showcasing the potential for deploying dangerous malware on affected switches.
Read at Theregister
[
|
]