CVE-2024-20276 — Uncaught Exception in Cisco IOS

CWE-248 — Uncaught Exception4 documents4 sources
Severity
7.4HIGHNVD
EPSS
0.1%
top 71.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS
Timeline
PublishedMar 27

Description

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 2.8 | Impact: 4.0

Affected Packages2 packages

▶CVEListV5cisco/ios7 versions+6
▶NVDcisco/ios7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-6287-hmpp-gmqm: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected d↗2024-03-27
▶
CVEList
CVE-2024-20276: A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected d↗2024-03-27
▶

📋Vendor Advisories

1
Cisco
Cisco IOS Software for Catalyst 6000 Series Switches Denial of Service Vulnerability↗2024-03-27
▶
CVE-2024-20276 — Uncaught Exception in Cisco IOS | cvebase