Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware.
The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected

ant attacker case china chinese chinese hackers cisco cisco nx-os cisco switches command command injection commands cve cve-2024 cvss cvss score cyber cyber espionage deliver malware espionage exploiting flaw hackers injection local malware nexus nx-os score software switches velvet ant vulnerability zero-day zero-day flaw