CVE-2024-20276 - OpenCVE

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dos-Hq4d3tZG

History

No history.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2024-03-27T16:51:46.937Z

Updated: 2024-08-01T21:52:31.696Z

Reserved: 2023-11-08T15:08:07.625Z

Link: CVE-2024-20276

Vulnrichment

Updated: 2024-08-01T21:52:31.696Z

NVD

Status : Awaiting Analysis

Published: 2024-03-27T17:15:51.513

Modified: 2024-03-27T17:48:21.140

Link: CVE-2024-20276

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-20276", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2023-11-08T15:08:07.625Z", "datePublished": "2024-03-27T16:51:46.937Z", "dateUpdated": "2024-08-01T21:52:31.696Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-03-27T16:51:46.937Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.\r\n\r This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition."}], "affected": [{"vendor": "Cisco", "product": "IOS", "versions": [{"version": "15.5(1)SY5", "status": "affected"}, {"version": "15.5(1)SY6", "status": "affected"}, {"version": "15.5(1)SY7", "status": "affected"}, {"version": "15.5(1)SY8", "status": "affected"}, {"version": "15.5(1)SY9", "status": "affected"}, {"version": "15.5(1)SY10", "status": "affected"}, {"version": "15.5(1)SY11", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Uncaught Exception", "type": "cwe", "cweId": "CWE-248"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dos-Hq4d3tZG", "name": "cisco-sa-ios-dos-Hq4d3tZG"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-ios-dos-Hq4d3tZG", "discovery": "EXTERNAL", "defects": ["CSCwf55936"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20276", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-29T17:13:32.148354Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:40:11.595Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:52:31.696Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dos-Hq4d3tZG", "name": "cisco-sa-ios-dos-Hq4d3tZG", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dos-Hq4d3tZG", "name": "cisco-sa-ios-dos-Hq4d3tZG", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T21:52:31.696Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-20276", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-29T17:13:32.148354Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:20.391Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"defects": ["CSCwf55936"], "advisory": "cisco-sa-ios-dos-Hq4d3tZG", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "IOS", "versions": [{"status": "affected", "version": "15.5(1)SY5"}, {"status": "affected", "version": "15.5(1)SY6"}, {"status": "affected", "version": "15.5(1)SY7"}, {"status": "affected", "version": "15.5(1)SY8"}, {"status": "affected", "version": "15.5(1)SY9"}, {"status": "affected", "version": "15.5(1)SY10"}, {"status": "affected", "version": "15.5(1)SY11"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dos-Hq4d3tZG", "name": "cisco-sa-ios-dos-Hq4d3tZG"}], "descriptions": [{"lang": "en", "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.\r\n\r This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-248", "description": "Uncaught Exception"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-03-27T16:51:46.937Z"}}}, "cveMetadata": {"cveId": "CVE-2024-20276", "state": "PUBLISHED", "dateUpdated": "2024-08-01T21:52:31.696Z", "dateReserved": "2023-11-08T15:08:07.625Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-03-27T16:51:46.937Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}