PT-2024-18668 · Cisco · Cisco Meraki Z Series Teleworker Gateway+2

Keane Okelley · Published 2024-10-02 · Updated 2024-10-08 · CVE-2024-20500

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices (affected versions not specified)

Description A vulnerability in the Cisco AnyConnect VPN server could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. This issue is due to insufficient resource management when establishing TLS/SSL sessions. An attacker could exploit this vulnerability by sending a series of crafted TLS/SSL messages to the VPN server of an affected device, causing the Cisco AnyConnect VPN server to stop accepting new connections and preventing new SSL VPN connections from being established. Existing SSL VPN sessions are not impacted. The server recovers gracefully without requiring manual intervention when the attack traffic stops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-07149

CVE-2024-20500

Affected Products

Cisco Anyconnect Vpn Server

Cisco Meraki Mx

Cisco Meraki Z Series Teleworker Gateway

References · 9

• https://osv.dev/vulnerability/CVE-2024-20500 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-mx-vpn-dos-QTRHzG2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20500 · Security Note
• https://bdu.fstec.ru/vul/2025-07149 · Security Note
• https://t.me/cvenotify/97505 · Telegram Post
• https://twitter.com/CVEnew/status/1841552662590062662 · Twitter Post
• https://vuldb.com/?id.279100 · Note
• https://twitter.com/oktsec/status/1841593434034851978 · Twitter Post
• https://t.me/cvedetector/6869 · Telegram Post