Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-20344

Опубликовано: 29 фев. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device.

This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:cisco:imm_management_package:*:*:*:*:*:*:*:*
Версия до 1.0.11-1582 (исключая)

Одно из

cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*

EPSS

Процентиль: 53%
0.00307
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 5.3
github
почти 2 года назад

A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device. This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality.

CVSS3: 5.3
fstec
почти 2 года назад

Уязвимость режима управления Intersight Managed Mode (IMM) микропрограммного обеспечения маршрутизаторов Cisco UCS 6400, Cisco UCS 6500 Series Fabric Interconnects, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 53%
0.00307
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-400