CVE-2024-20474
Quick assessment
Affected
Cisco Cisco Secure Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Secure Client是美国思科（Cisco）公司的一个用于连接虚拟专用网络的软件。 Cisco Secure Client存在安全漏洞，该漏洞源于存在整数下溢问题。攻击者利用该漏洞导致系统拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499.001 · OS Exhaustion Flood
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-20474
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.
This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software.
Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Secure Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Secure Client是美国思科（Cisco）公司的一个用于连接虚拟专用网络的软件。 Cisco Secure Client存在安全漏洞，该漏洞源于存在整数下溢问题。攻击者利用该漏洞导致系统拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Secure Client | 4.9.00086 | - |
|
II. Public POCs for CVE-2024-20474
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-20474
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-20474 (1)
Same Patch Batch · Cisco · 2024-10-23 · 52 CVEs total
| CVE-2024-20424 | 9.9 CRITICAL | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20329 | 9.9 CRITICAL | Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability |
| CVE-2024-20412 | 9.3 CRITICAL | Cisco Firepower Threat Defense 安全漏洞 |
| CVE-2024-20351 | 8.6 HIGH | Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability |
| CVE-2024-20260 | 8.6 HIGH | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL V |
| CVE-2024-20494 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20426 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20330 | 8.6 HIGH | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 an |
| CVE-2024-20339 | 8.6 HIGH | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vu |
| CVE-2024-20402 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20495 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20268 | 7.7 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Deni |
| CVE-2024-20408 | 7.7 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20275 | 6.8 MEDIUM | Cisco Secure Firewall Management Center Software Backup Cluster Command Injection Vulnerab |
| CVE-2024-20331 | 6.8 MEDIUM | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication |
| CVE-2024-20471 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20379 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20374 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20482 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20340 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Secure Client
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-191
-
CVE-2026-107794
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl -
CVE-2013-10076
ExtUtils::Typemaps::STL::Vector versions before 1.05 for Per -
CVE-2026-106429
Application denial of service via malformed KMS endpoint in -
CVE-2026-106437
Out-of-bounds read and write via undersized BSON buffer rese -
CVE-2026-107635
Dislocker through 0.7.3 Out-of-Bounds Heap Read via VMK/FVEK
V. Comments for CVE-2024-20474
No comments yet