Cisco ASR 9000 Series Aggregation Services Routers Vulnerable to Denial of Service Attack via PPPoE Termination

CVE-2024-20327

Summary

A vulnerability exists within the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software used in Cisco ASR 9000 Series Aggregation Services Routers. This flaw arises from the improper processing of malformed PPPoE packets on routers utilizing Broadband Network Gateway (BNG) functionality with PPPoE termination. An adjacent, unauthenticated attacker could exploit this vulnerability by sending specially crafted PPPoE packets to an interface on the line card that is not configured for PPPoE termination. Successful exploitation would lead to the crashing of the ppp_ma process, resulting in a denial of service (DoS) condition affecting PPPoE traffic processing across the router.

References