PT-2024-6450 · Cisco · Cisco Ios Xe

Published 2024-09-25 · Updated 2024-10-03 · CVE-2024-20480

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description The issue is related to a logical error in the DHCP Snooping feature of Cisco IOS XE Software, specifically due to improper handling of IPv4 DHCP packets. This could allow a remote attacker to cause high CPU utilization on an affected device, resulting in a denial of service (DoS) condition that requires a manual reload to recover. An attacker could exploit this by sending certain IPv4 DHCP packets to an affected device, potentially causing the device to exhaust CPU resources and stop processing traffic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-783

CWE-670

Related Identifiers

BDU:2024-07536

CVE-2024-20480

Affected Products

Cisco Ios Xe

References · 8

• https://bdu.fstec.ru/vul/2024-07536 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/712234 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20480 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sda-edge-dos-MBcbG9k · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20480 · Security Note
• https://twitter.com/CveFindCom/status/1838987249716707611 · Twitter Post
• https://twitter.com/CVEnew/status/1838983834513137919 · Twitter Post
• https://t.me/cvedetector/6344 · Telegram Post