CVE-2024-20434

MEDIUM
Published Sep 25, 2024 Modified Oct 8, 2024 CWE-190

Description

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device. This vulnerability is due to improper handling of frames with VLAN tag information. An attacker could exploit this vulnerability by sending crafted frames to an affected device. A successful exploit could allow the attacker to render the control plane of the affected device unresponsive. The device would not be accessible through the console or CLI, and it would not respond to ping requests, SNMP requests, or requests from other control plane protocols. Traffic that is traversing the device through the data plane is not affected. A reload of the device is required to restore control plane services.

Is your site exposed to CVE-2024-20434?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.3
MEDIUM
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

CWE-190 Integer Overflow

Affected Products

Vendor Product
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe
cisco ios_xe

References

Frequently Asked Questions

What is CVE-2024-20434? +
A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device. This vulnerability is due to improper handling of frames with VLAN tag information. An attacker could exploit this vulnerability by sending crafted frames to an affected device. A successful exploit could allow the attacker to render the control plane of the affected device unresponsive. The device would not be accessible through the console or CLI, and it would not respond to ping requests, SNMP requests, or requests from other control plane protocols. Traffic that is traversing the device through the data plane is not affected. A reload of the device is required to restore control plane services. It has a CVSS v3.1 base score of 4.3 (MEDIUM).
How severe is CVE-2024-20434? +
CVE-2024-20434 has a CVSS v3.1 score of 4.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-20434? +
CVE-2024-20434 affects products from cisco, specifically: ios_xe. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-20434? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-20434 — free, no signup required.