7.4
CVSSv3

CVE-2024-20313

Published: 24/04/2024 Updated: 30/04/2024
CVSS v3 Base Score: 7.4 | Impact Score: 4 | Exploitability Score: 2.8

Vulnerability Summary

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent malicious user to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the malicious user to cause the affected device to reload, resulting in a DoS condition.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 17.5.1

cisco ios xe 17.5.1a

cisco ios xe 17.6.1

cisco ios xe 17.6.1a

cisco ios xe 17.6.1w

cisco ios xe 17.6.3

cisco ios xe 17.9.1

cisco ios xe 17.6.2

cisco ios xe 17.6.3a

cisco ios xe 17.7.1

cisco ios xe 17.7.1a

cisco ios xe 17.7.2

cisco ios xe 17.8.1

cisco ios xe 17.8.1a

cisco ios xe 17.11.1

cisco ios xe 17.10.1

cisco ios xe 17.6.4

cisco ios xe 17.9.1a

cisco ios xe 17.9.1w

cisco ios xe 17.6.1x

cisco ios xe 17.6.1y

cisco ios xe 17.6.1z

cisco ios xe 17.6.1z1

cisco ios xe 17.6.5

cisco ios xe 17.7.1b

cisco ios xe 17.10.1a

cisco ios xe 17.10.1b

cisco ios xe 17.9.2

cisco ios xe 17.9.1x

cisco ios xe 17.9.1y

cisco ios xe 17.9.3

cisco ios xe 17.9.2a

cisco ios xe 17.9.1x1

cisco ios xe 17.9.3a

cisco ios xe 17.9.1y1

cisco ios xe 17.11.1a

cisco ios xe 17.11.99sw

cisco ios xe 17.6.5a