PT-2023-9500 · Cisco · Cisco Ios Xe

Published 2023-11-08 · Updated 2024-10-24 · CVE-2024-20455

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the process that classifies traffic going to the Unified Threat Defense (UTD) component could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because UTD improperly handles certain packets as those packets egress an SD-WAN IPsec tunnel. An attacker could exploit this vulnerability by sending crafted traffic through an SD-WAN IPsec tunnel that is configured on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note that SD-WAN tunnels configured with Generic Routing Encapsulation (GRE) are not affected by this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the SD-WAN IPsec tunnel to minimize the risk of exploitation. Avoid using the SD-WAN IPsec tunnel until the issue is resolved. Cisco has released software updates that address this vulnerability, it is recommended to apply these updates to fix the issue.

DoS

Weakness Enumeration

CWE-371

Related Identifiers

BDU:2024-07913

CVE-2024-20455

Affected Products

Cisco Ios Xe

References · 13

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-utd-dos-hDATqxs · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20455 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20455 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07913 · Security Note
• https://vuldb.com/?id.278482 · Note
• https://twitter.com/CVEnew/status/1838983844462027024 · Twitter Post
• https://twitter.com/CCBalert/status/1840772320832397390 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1839029754415948235 · Twitter Post
• https://twitter.com/CveFindCom/status/1838979670424871178 · Twitter Post
• https://t.me/cvedetector/6349 · Telegram Post
• https://vulners.com/cve/CVE-2024-20455 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20455 · Note
• https://t.me/cvenotify/99425 · Telegram Post