Cisco IOS XE Software Vulnerability Could Lead to Denial of Service
CVE-2024-20464

8.6HIGH

Key Information:

Vendor
Cisco
Status
iOS Xe
Vendor
CVE Published:
25 September 2024

Summary

A vulnerability exists in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software that potentially allows an unauthenticated remote attacker to create a denial of service (DoS) condition. This issue stems from insufficient validation of IPv4 PIMv2 packets. An attacker may exploit this vulnerability by sending a specially crafted PIMv2 packet to a PIM-enabled interface on the device. Successful exploitation could lead to the affected device reloading unexpectedly, thus causing service disruption. It is important for users to apply the relevant patches and updates to mitigate potential risks.

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.