High WID-SEC-2024-2221 6 CVEs

Cisco IOS XE: Mehrere Schwachstellen

Published Sep 25, 2024 · Updated Sep 25, 2024 · de-DE

Vendor: Cisco Product: IOS XE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um einen Denial of Service Angriff durchzuführen, die Zugriffskontrollliste (ACL) vor der Authentifizierung zu umgehen oder Daten zu manipulieren.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 6

High 8.6

CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024
High 8.6

CVE-2024-20464

A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthentic…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024
High 8.6

CVE-2024-20467 Public exploit

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024
High 8.6

CVE-2024-20480

A vulnerability in the DHCP Snooping feature of Cisco IOS XE Software on Software-Defined Access (SD-Access) fabric edg…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024
High 8.1

CVE-2024-20437

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote a…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024
Medium 4.7

CVE-2024-20510

A vulnerability in the Central Web Authentication (CWA) feature of Cisco IOS XE Software for Wireless Controllers could…

Cisco Cisco IOS XE Software iOS Network devices

Sep 25, 2024

Revision history

2024-09-25 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c9800-cwa-acl-nPSbHSnA
Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpp-vfr-dos-nhHKGgO
Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-httpsrvr-dos-yOZThut
Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-sda-edge-dos-MBcbG9k
Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pim-APbVfySJ
Cisco Security Advisory vom 2024-09-25
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-csrf-ycUYxkKO