DeutschShown in its original language — a full translation is planned for a future version.
Cisco IOS XE: Mehrere Schwachstellen
view advisory published 2024-03-27
Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20313US | high7.4 | — | ||
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly… | ||||
| CVE-2024-20324US | — | — | ||
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords.
This v… | ||||
| CVE-2024-20316US | medium5.3 | — | ||
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protec… | ||||
| CVE-2024-20314US | high7.5 | — | ||
A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… | ||||
| CVE-2024-20309US | medium5.5 | — | ||
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop r… | ||||
| CVE-2024-20306US | medium6.7 | — | ||
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root on… | ||||
| CVE-2024-20303US | — | — | ||
A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… | ||||
| CVE-2024-20278US | — | — | ||
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device.
This vulnerabi… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan