Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-20313

Quick assessment

Affected
Cisco Cisco IOS XE Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco IOS XE Software是美国思科（Cisco）公司的一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS XE Software存在安全漏洞，该漏洞源于对设备处理的 OSPF 更新验证不当。攻击者利用该漏洞导致受影响的设备意外重新加载，从而导致拒绝服务。

CVSS 7.4 · High EPSS 0.26% · P16
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-20313

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco IOS XE Software 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS XE Software是美国思科（Cisco）公司的一个操作系统。用于企业有线和无线访问，汇聚，核心和WAN的单一操作系统，Cisco IOS XE降低了业务和网络的复杂性。 Cisco IOS XE Software存在安全漏洞，该漏洞源于对设备处理的 OSPF 更新验证不当。攻击者利用该漏洞导致受影响的设备意外重新加载，从而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco IOS XE Software 17.5.1 -

II. Public POCs for CVE-2024-20313

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-20313

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-20313 (1)

Same Patch Batch · Cisco · 2024-04-24 · 8 CVEs total

CVE-2024-20295 8.8 HIGH Cisco Integrated Management Controller 操作系统命令注入漏洞
CVE-2024-20356 8.7 HIGH Cisco Integrated Management Controller 操作系统命令注入漏洞
CVE-2024-20353 8.6 HIGH Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞
CVE-2024-20358 6.0 MEDIUM Cisco Firepower Threat Defense和Adaptive Security Appliance 操作系统命令注入漏洞
CVE-2024-20359 6.0 MEDIUM Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞
CVE-2023-20249 5.4 MEDIUM Cisco TelePresence Management Suite 安全漏洞
CVE-2023-20248 Cisco TelePresence Management Suite 安全漏洞

IV. Related Vulnerabilities

Same product: Cisco IOS XE Software
Same vendor: Cisco
Same weakness: CWE-120

V. Comments for CVE-2024-20313

No comments yet

Leave a comment