Cisco IOS XE Software Vulnerability Could Lead to Device Reload or Denial of Service
CVE-2024-20309
Key Information
- Vendor
- Cisco
- Status
- Cisco iOS Xe Software
- Vendor
- CVE Published:
- 27 March 2024
Badges
Summary
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop responding.
This vulnerability is due to the incorrect handling of specific ingress traffic when flow control hardware is enabled on the AUX port. An attacker could exploit this vulnerability by reverse telnetting to the AUX port and sending specific data after connecting. A successful exploit could allow the attacker to cause the device to reset or stop responding, resulting in a denial of service (DoS) condition.
Affected Version(s)
Cisco IOS XE Software = 3.7.0S
Cisco IOS XE Software = 3.7.1S
Cisco IOS XE Software = 3.7.2S
References
CVSS V3.1
Timeline
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved