CVE-2024-20259
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.
Una vulnerabilidad en la función de espionaje DHCP del software Cisco IOS XE podría permitir que un atacante remoto no autenticado provoque que un dispositivo afectado se recargue inesperadamente, lo que resultaría en una condición de denegación de servicio (DoS). Esta vulnerabilidad se debe a que un paquete de solicitud DHCP IPv4 manipulado se maneja mal cuando el análisis de endpoints está habilitado. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud DHCP manipulada a través de un dispositivo afectado. Un exploit exitoso podría permitir que el atacante provoque que el dispositivo se recargue, lo que resultaría en una condición DoS. Nota: El vector de ataque aparece como red porque una retransmisión DHCP en cualquier lugar de la red podría permitir ataques desde redes distintas a la adyacente.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-11-08 CVE Reserved
- 2024-03-27 CVE Published
- 2024-03-28 EPSS Updated
- 2024-08-27 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dhcp-dos-T3CXPO9z |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.1.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.1.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.1.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.1.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.1.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.1.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.2.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.2.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.6 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.7 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.8 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.3.8 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.3.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.4.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.4.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.4.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.4.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.4.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.4.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.4.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.5.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.5.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.5.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.5.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.6 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.6 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.6.5 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.6.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.7.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.7.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.10.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.10.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.8.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.8.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.8.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.8.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.2 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.3 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.9.4 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.9.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.12.1 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco IOS XE Software Search vendor "Cisco" for product "Cisco IOS XE Software" | 17.11.99 Search vendor "Cisco" for product "Cisco IOS XE Software" and version "17.11.99" | en |
Affected
| ||||||