Lucene search

K
cvelistCiscoCVELIST:CVE-2024-20276
HistoryMar 27, 2024 - 4:51 p.m.

CVE-2024-20276

2024-03-2716:51:46
cisco
www.cve.org
cisco ios software
vulnerability
cisco catalyst 6000
denial of service
unauthenticated
adjacent attacker
crafted traffic
dos condition
reload

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.

This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "IOS",
    "versions": [
      {
        "version": "15.5(1)SY5",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY6",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY7",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY8",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY9",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY10",
        "status": "affected"
      },
      {
        "version": "15.5(1)SY11",
        "status": "affected"
      }
    ]
  }
]

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2024-20276