CVE-2024-20327

Published Mar 13, 2024 CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Description

A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the ppp_ma process, resulting in a denial of service (DoS) condition.

This vulnerability is due to the improper handling of malformed PPPoE packets that are received on a router that is running Broadband Network Gateway (BNG) functionality with PPPoE termination on a Lightspeed-based or Lightspeed-Plus-based line card. An attacker could exploit this vulnerability by sending a crafted PPPoE packet to an affected line card interface that does not terminate PPPoE. A successful exploit could allow the attacker to crash the ppp_ma process, resulting in a DoS condition for PPPoE traffic across the router.

Analysis

No analysis available yet

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco IOS XR Software

affected

Version	Status	Constraints
`5.2.0`	affected	—
`5.2.2`	affected	—
`5.2.4`	affected	—
`5.3.0`	affected	—
`5.3.1`	affected	—
`5.3.2`	affected	—
`5.3.3`	affected	—
`5.3.4`	affected	—
`6.0.0`	affected	—
`6.0.1`	affected	—
`6.0.2`	affected	—
`6.1.1`	affected	—
`6.1.2`	affected	—
`6.1.3`	affected	—
`6.1.4`	affected	—
`6.2.1`	affected	—
`6.2.2`	affected	—
`6.2.3`	affected	—
`6.2.25`	affected	—
`6.3.2`	affected	—
`6.3.3`	affected	—
`6.4.1`	affected	—
`6.4.2`	affected	—
`6.5.1`	affected	—
`6.5.2`	affected	—
`6.5.3`	affected	—
`6.6.2`	affected	—
`6.6.3`	affected	—
`6.6.25`	affected	—
`7.0.1`	affected	—
`7.0.2`	affected	—
`7.1.1`	affected	—
`7.1.15`	affected	—
`7.1.2`	affected	—
`7.1.3`	affected	—
`6.7.1`	affected	—
`6.7.2`	affected	—
`6.7.3`	affected	—
`7.3.1`	affected	—
`7.3.2`	affected	—
`7.3.3`	affected	—
`7.3.5`	affected	—
`7.4.1`	affected	—
`7.4.2`	affected	—
`6.8.1`	affected	—
`6.8.2`	affected	—
`7.5.1`	affected	—
`7.5.3`	affected	—
`7.5.2`	affected	—
`7.5.4`	affected	—
`7.5.5`	affected	—
`7.6.1`	affected	—
`7.6.2`	affected	—
`7.7.1`	affected	—
`7.7.2`	affected	—
`6.9.1`	affected	—
`6.9.2`	affected	—
`7.8.1`	affected	—
`7.8.2`	affected	—
`7.9.1`	affected	—
`7.9.2`	affected	—

Configuration 1 [-]

AND

OR	cpe:2.3:o:cisco:ios_xr::::::::
	cpe:2.3:o:cisco:ios_xr::::::::
	cpe:2.3:o:cisco:ios_xr::::::::

OR	cpe:2.3:h:cisco:asr_9000v-v2:-:::::::*
	cpe:2.3:h:cisco:asr_9001:-:::::::*
	cpe:2.3:h:cisco:asr_9006:-:::::::*
	cpe:2.3:h:cisco:asr_9010:-:::::::*
	cpe:2.3:h:cisco:asr_9901:-:::::::*
	cpe:2.3:h:cisco:asr_9902:-:::::::*
	cpe:2.3:h:cisco:asr_9903:-:::::::*
	cpe:2.3:h:cisco:asr_9904:-:::::::*
	cpe:2.3:h:cisco:asr_9906:-:::::::*
	cpe:2.3:h:cisco:asr_9910:-:::::::*
	cpe:2.3:h:cisco:asr_9912:-:::::::*
	cpe:2.3:h:cisco:asr_9922:-:::::::*

No data.

No data available yet.

Remediation

No remediation available yet

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-18042	A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the ppp_ma process, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of malformed PPPoE packets that are received on a router that is running Broadband Network Gateway (BNG) functionality with PPPoE termination on a Lightspeed-based or Lightspeed-Plus-based line card. An attacker could exploit this vulnerability by sending a crafted PPPoE packet to an affected line card interface that does not terminate PPPoE. A successful exploit could allow the attacker to crash the ppp_ma process, resulting in a DoS condition for PPPoE traffic across the router.

Metrics

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.336% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pppma-JKWFgneW

History

May 6, 2025 5:30 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco asr 9000v-v2 Cisco asr 9001 Cisco asr 9006 Cisco asr 9010 Cisco asr 9901 Cisco asr 9902 Cisco asr 9903 Cisco asr 9904 Cisco asr 9906 Cisco asr 9910 Cisco asr 9912 Cisco asr 9922 Cisco ios Xr
Weaknesses		NVD-CWE-Other
CPEs		cpe:2.3:h:cisco:asr_9000v-v2:-:::::::* cpe:2.3:h:cisco:asr_9001:-:::::::* cpe:2.3:h:cisco:asr_9006:-:::::::* cpe:2.3:h:cisco:asr_9010:-:::::::* cpe:2.3:h:cisco:asr_9901:-:::::::* cpe:2.3:h:cisco:asr_9902:-:::::::* cpe:2.3:h:cisco:asr_9903:-:::::::* cpe:2.3:h:cisco:asr_9904:-:::::::* cpe:2.3:h:cisco:asr_9906:-:::::::* cpe:2.3:h:cisco:asr_9910:-:::::::* cpe:2.3:h:cisco:asr_9912:-:::::::* cpe:2.3:h:cisco:asr_9922:-:::::::* cpe:2.3:o:cisco:ios_xr::::::::
Vendors & Products		Cisco Cisco asr 9000v-v2 Cisco asr 9001 Cisco asr 9006 Cisco asr 9010 Cisco asr 9901 Cisco asr 9902 Cisco asr 9903 Cisco asr 9904 Cisco asr 9906 Cisco asr 9910 Cisco asr 9912 Cisco asr 9922 Cisco ios Xr