← Back

CVE-2024-20313

nvd nist
Published: Apr 24, 2024Modified: Nov 21, 2024

JSON object

Loading...
7.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 4.0
Source: NVD

Description

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected (38)

Products: Cisco: Ios Xe
1 product
Ios Xe
Configuration A
38 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 17.10.1
Version 17.10.1a
Version 17.10.1b
Version 17.11.1
Version 17.11.1a
Version 17.11.99sw
Version 17.5.1
Version 17.5.1a
Version 17.6.1
Version 17.6.1a
Version 17.6.1w
Version 17.6.1x
Version 17.6.1y
Version 17.6.1z1
Version 17.6.1z
Version 17.6.2
Version 17.6.3
Version 17.6.3a
Version 17.6.4
Version 17.6.5
Version 17.6.5a
Version 17.7.1
Version 17.7.1a
Version 17.7.1b
Version 17.7.2
Version 17.8.1
Version 17.8.1a
Version 17.9.1
Version 17.9.1a
Version 17.9.1w
Version 17.9.1x1
Version 17.9.1x
Version 17.9.1y1
Version 17.9.1y
Version 17.9.2
Version 17.9.2a
Version 17.9.3
Version 17.9.3a

Timeline

No history available yet.