Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilities
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition to the AnyConnect VPN service on an affected device. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco Meraki has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20513US | medium5.3 | — | ||
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause… | ||||
| CVE-2024-20502US | high7.5 | — | ||
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause… | ||||
| CVE-2024-20501US | high7.5 | — | ||
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker… | ||||
| CVE-2024-20500US | high7.5 | — | ||
A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause… | ||||
| CVE-2024-20499US | high7.5 | — | ||
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker… | ||||
| CVE-2024-20498US | high7.5 | — | ||
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- firmware best practicesexternal
- Cisco Meraki Supportexternal
- Cisco Meraki MX and Z Series Teleworker Gateway AnyConnect VPN Denial of Service Vulnerabilitiesself
- Cisco Security Advisories pageexternal
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
remediations (6)
- FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Meraki MX Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan