CVE-2024-20484: Cisco Enterprise Chat and Email Denial of Service Vulnerability
First published: Wed Nov 06 2024(Updated: )
A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic that is received by an affected device. An attacker could exploit this vulnerability by sending crafted MR PIM traffic to an affected device. A successful exploit could allow the attacker to trigger a failure on the MR PIM connection between Cisco ECE and Cisco Unified Contact Center Enterprise (CCE), leading to a DoS condition on EAAS that would prevent customers from starting chat, callback, or delayed callback sessions. Note: When the attack traffic stops, the EAAS process must be manually restarted to restore normal operation. To restart the process in the System Console, choose Shared Resources > Services > Unified CCE > EAAS, then click Start.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Enterprise Chat and Email | ||
| Cisco Enterprise Chat and Email | <12.5(1)es9 | |
| Cisco Enterprise Chat and Email | >=12.6(1)<12.6(1)es9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-20484?
CVE-2024-20484 has been assigned a high severity rating due to its potential to cause a denial of service condition.
How do I fix CVE-2024-20484?
To fix CVE-2024-20484, you should apply the latest security updates provided by Cisco for Enterprise Chat and Email.
What systems are affected by CVE-2024-20484?
CVE-2024-20484 affects the Cisco Enterprise Chat and Email (ECE) systems that utilize the External Agent Assignment Service feature.
Can CVE-2024-20484 be exploited remotely?
Yes, CVE-2024-20484 can be exploited by unauthenticated, remote attackers, allowing them to cause denial of service.
What impact does CVE-2024-20484 have on network operations?
CVE-2024-20484 can lead to a significant disruption in network operations by causing a denial of service condition on affected devices.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco enterprise chat and email
- version/cisco enterprise chat and email/12.6(1)