Lucene search

K
cve[email protected]CVE-2024-20276
HistoryMar 27, 2024 - 5:15 p.m.

CVE-2024-20276

2024-03-2717:15:51
CWE-248
web.nvd.nist.gov
36
cve-2024-20276
cisco ios software
unauthenticated attacker
adjacent
device reload
process-switched traffic
crafted traffic
denial of service

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.

This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "IOS",
    "versions": [
      {
        "version": "15.5(1)SY5",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY6",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY7",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY8",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY9",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY10",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY11",
        "status": "affected"
      }
    ]
  }
]

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-20276