A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote attacker with Administrator-level privileges to install a modified software image, leading to arbitrary code injection on an affected system. This vulnerability is due to insufficient signature validation of software images. An attacker could exploit this vulnerability by installing a modified software image. A successful exploit could allow the attacker to execute arbitrary code on the affected system and elevate their privileges to root. Note: Administrators should always validate the hash of any upgrade image before uploading it to Cisco APIC and Cisco Cloud Network Controller.
総合評価: CVE-2024-20478 は中リスク（43.8/100）。CVSS 深刻度は中。悪用される可能性が高い（EPSS 0.74%、50 パーセンタイル） 推奨対応: 影響資産を整理し、修補計画に組み込んでください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置（高いほど相対的に深刻）を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.27% | 0.74% | +0.47% |
| 2 | 2026-01-17 | 0.22% | 0.27% | +0.05% |
| 3 | 2026-01-04 | — | 0.22% | — |
EPSS の全履歴 （全 15 件）
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 6.5 | 3.1 | MEDIUM |
|
1.2 | 5.2 | [email protected] |
| 7.2 | 3.1 | HIGH |
|
1.2 | 5.9 | [email protected] |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| cisco | application_policy_infrastructure_controller | 1.1\(1d\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1d\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(1j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(1n\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1n\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(1o\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1o\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(1r\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1r\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(1s\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(1s\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(2h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(2i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(2i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(3f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(3f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4e\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4e\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4l\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4l\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.1\(4m\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1\(4m\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(1h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(1i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(1k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(1m\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(1m\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(2g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(2h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(2i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(2j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(2j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(3c\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3c\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(3e\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3e\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(3h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.2\(3m\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.2\(3m\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(1g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(1h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(1i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(1j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(1j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(2f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(2h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(2i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(2j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 1.3\(2k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.3\(2k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1l\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1l\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1m\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1m\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1n\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1n\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1o\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1o\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1p\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1p\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1q\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1q\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(1r\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(1r\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2l\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2l\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2m\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2m\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2n\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2n\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.0\(2o\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.0\(2o\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(1h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(1i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(1i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(2e\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2e\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(2f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(2g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(2k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(2k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(3g\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3g\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(3h\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3h\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(3j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(3j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.1\(4a\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.1\(4a\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(1k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(1n\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1n\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(1o\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(1o\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2e\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2e\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2i\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2i\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2k\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2k\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(2q\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(2q\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(3j\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3j\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(3p\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3p\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(3r\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3r\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(3s\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3s\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(3t\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(3t\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(4f\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4f\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(4p\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4p\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(4q\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4q\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.2\(4r\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.2\(4r\):*:*:*:*:*:*:* |
| cisco | application_policy_infrastructure_controller | 2.3\(1e\) | cpe:2.3:a:cisco:application_policy_infrastructure_controller:2.3\(1e\):*:*:*:*:*:*:* |