High WID-SEC-2024-0745 8 CVEs

Cisco IOS XE: Mehrere Schwachstellen

Published Mar 27, 2024 · Updated Mar 27, 2024 · de-DE

Vendor: Cisco Product: IOS XE

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 8

High 8.6

CVE-2024-20314

A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
High 7.4

CVE-2024-20303

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
High 7.4

CVE-2024-20313

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacen…

Cisco Cisco IOS XE Software iOS Network devices

Apr 24, 2024
Medium 6.5

CVE-2024-20278

A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevat…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
Medium 6.0

CVE-2024-20306

A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authentic…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
Medium 5.8

CVE-2024-20316

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, rem…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
Medium 5.6

CVE-2024-20309

A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, l…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024
Medium 5.5

CVE-2024-20324

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to acc…

Cisco Cisco IOS XE Software iOS Network devices

Mar 27, 2024

Revision history

2024-03-27 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aux-333WBz8f
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ospf-dos-dR9Sfrxp
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-priv-esc-seAx6NLX
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-utd-cmd-JbL8KvHT
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-privesc-RjSMrmPK
Cisco Security Advisory vom 2024-03-27
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf