PT-2024-2576 · Cisco · Cisco Ios Xe

Published 2024-03-27 · Updated 2025-07-30 · CVE-2024-20314

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature could allow an unauthenticated, remote attacker to cause high CPU utilization and stop all traffic processing, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain IPv4 packets. An attacker could exploit this vulnerability by sending certain IPv4 packets to an affected device. A successful exploit could allow the attacker to cause the device to exhaust CPU resources and stop processing traffic, resulting in a DoS condition.

Recommendations Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. At the moment, there is no information about specific affected versions that contains a fix for this vulnerability.

Fix

DoS

Weakness Enumeration

CWE-783

Related Identifiers

BDU:2024-02632

CVE-2024-20314

Affected Products

Cisco Ios Xe

References · 7

• https://osv.dev/vulnerability/CVE-2024-20314 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20314 · Security Note
• https://bdu.fstec.ru/vul/2024-02632 · Security Note
• https://cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#EdgeNode · Vendor Advisory
• https://t.me/cveNotify/130249 · Telegram Post
• https://twitter.com/CVEnew/status/1773096355235541021 · Twitter Post