CVE-2024-20467: High severity cisco ios xe vulnerability
A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper management of resources during fragment reassembly. An attacker could exploit this vulnerability by sending specific sizes of fragmented packets to an affected device or through a Virtual Fragmentation Reassembly (VFR)-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: This vulnerability affects Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers if they are running Cisco IOS XE Software Release 17.12.1 or 17.12.1a.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20467?
CVE-2024-20467 is classified as having a high severity rating due to its potential to cause a denial of service (DoS) on affected devices.
How do I fix CVE-2024-20467?
To mitigate CVE-2024-20467, upgrade to the latest version of Cisco IOS XE Software that addresses this vulnerability.
Which devices are affected by CVE-2024-20467?
CVE-2024-20467 affects Cisco IOS XE versions 17.11.99sw, 17.12.1, and 17.12.1a.
Can CVE-2024-20467 be exploited remotely?
Yes, CVE-2024-20467 can be exploited by unauthenticated remote attackers.
What kind of attack does CVE-2024-20467 allow?
CVE-2024-20467 allows attackers to cause a denial of service condition by exploiting the IPv4 fragmentation reassembly code.