CVE-2024-20276

Опубликовано: 27 мар. 2024

Источник: nvd

CVSS3: 7.4

EPSS Низкий

Описание

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.

This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:ios:15.5\(1\)sy5:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy6:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy7:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy8:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy9:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy10:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.5\(1\)sy11:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_6807-xl:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_c6800-sup6t:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:catalyst_c6800-sup6t-xl:-:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00136

Низкий

7.4 High

CVSS3

Дефекты

CWE-248

Связанные уязвимости

GHSA-6287-hmpp-gmqm

CVSS3: 7.4

github

почти 2 года назад

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

BDU:2024-02656

CVSS3: 7.4

fstec

почти 2 года назад

Уязвимость операционных систем Cisco IOS сетевых устройств Cisco Catalyst серии 6000, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 34%

0.00136

Низкий

7.4 High

CVSS3

Дефекты

CWE-248