CVE-2024-20276
HighWhat is CVE-2024-20276?
A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
CVSS Vector Breakdown
CVSS 3.1Exploitable from an adjacent network (e.g. same LAN, Wi-Fi segment, Bluetooth).
No special conditions required. Exploit can be performed reliably and repeatedly.
No authentication required. Any anonymous user can exploit this vulnerability.
No user interaction required. Exploit runs without any victim action.
Exploiting the vulnerability can affect other components beyond the vulnerable one.
No confidentiality impact. Sensitive data is not exposed.
No integrity impact. Data cannot be modified.
Complete denial of service. The component becomes fully unavailable.
Known Affected Devices
FAQ
CVE-2024-20276 has a CVSS score of 7.4/10, rated as High. This is a high severity vulnerability and should be patched as soon as possible.
CVSS (Common Vulnerability Scoring System) rates vulnerability severity from 0.0 to 10.0. CVE-2024-20276 scores 7.4/10 (High). Scores 9.0–10.0 are Critical, 7.0–8.9 are High, 4.0–6.9 are Medium, and below 4.0 are Low.
The list of devices confirmed to be affected by CVE-2024-20276 is shown in the "Affected Devices" section above. Check your firmware version against the vendor security advisory and apply the latest patch.
Apply the latest firmware or software update from the vendor. Check the References section above for official advisories and patch notes. If no patch is available, consider disabling the affected feature or isolating the device from untrusted networks.