PT-2024-2335 · Cisco · Cisco Ios Xr

Published 2024-03-13 · Updated 2025-07-07 · CVE-2024-20319

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software (affected versions not specified)

Description A vulnerability in the UDP forwarding code could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane (SNMP) server of an affected device. This issue is due to incorrect UDP forwarding programming when using SNMP with management plane protection. An attacker could exploit this by attempting to perform an SNMP operation using broadcast as the destination address that could be processed by an affected device configured with an SNMP server. A successful exploit could allow the attacker to communicate to the device on the configured SNMP ports. Although an unauthenticated attacker could send UDP datagrams to the configured SNMP port, only an authenticated user can retrieve or modify data using SNMP requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-02280

CVE-2024-20319

Affected Products

Cisco Ios Xr

References · 7

• https://bdu.fstec.ru/vul/2024-02280 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uhv6ZDeF · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20319 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20319 · Security Note
• https://t.me/cvenotify/127847 · Telegram Post
• https://vuldb.com/?id.256734 · Note
• https://twitter.com/CVEnew/status/1767962572743954824 · Twitter Post