DeutschShown in its original language — a full translation is planned for a future version.
Cisco IOS XR: Mehrere Schwachstellen
view advisory published 2024-09-11
Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um einen Denial of Service Angriff durchzuführen, erhöhte Rechte zu erlangen und vertrauliche Informationen preiszugeben.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20406US | high7.4 | — | ||
A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent… | ||||
| CVE-2024-20398US | high7.8 | — | ||
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write file system access on the underlying operating system of an af… | ||||
| CVE-2024-20390US | medium5.3 | — | ||
A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on XML TCP listen por… | ||||
| CVE-2024-20343US | medium5.5 | — | ||
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system. The a… | ||||
| CVE-2024-20317US | high7.4 | — | ||
A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow an unauthenticated, ad… | ||||
| CVE-2024-20304US | high7.5 | — | ||
A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust the UDP packet memory of… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisories vom 2024-09-11external
- Cisco Security Advisories vom 2024-09-11external
- Cisco Security Advisories vom 2024-09-11external
- Cisco Security Advisories vom 2024-09-11external
- Cisco Security Advisories vom 2024-09-11external
- Cisco Security Advisories vom 2024-09-11external
- WID-SEC-W-2024-2125 - CSAF Versionself
- WID-SEC-2024-2125 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan