PT-2024-2575 · Cisco · Cisco Ios Xr

Published 2024-03-13 · Updated 2024-03-13 · CVE-2024-20262

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software (affected versions not specified)

Description A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system directory, which could lead to a denial of service (DoS) condition. The attacker would require valid user credentials to perform this attack. This vulnerability is due to a lack of proper validation of SCP and SFTP CLI input parameters. An attacker could exploit this vulnerability by authenticating to the device and issuing SCP or SFTP CLI commands with specific parameters. A successful exploit could allow the attacker to impact the functionality of the device, which could lead to a DoS condition. The device may need to be manually rebooted to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2024-02631

CVE-2024-20262

Affected Products

Cisco Ios Xr

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-dos-kb6sUUHw · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02631 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20262 · Security Note
• https://cybersecurity-help.cz/vdb/SB2024031426 · Note
• https://twitter.com/CVEnew/status/1767962573847019691 · Twitter Post