DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco IOS XE: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-03-27
Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XE ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen, seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20313US | high7.4 | — | ||
A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly… | ||||
| CVE-2024-20324US | — | — | ||
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords.
This v… | ||||
| CVE-2024-20316US | medium5.3 | — | ||
A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protec… | ||||
| CVE-2024-20314US | high7.5 | — | ||
A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU… | ||||
| CVE-2024-20309US | medium5.5 | — | ||
A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop r… | ||||
| CVE-2024-20306US | medium6.7 | — | ||
A vulnerability in the Unified Threat Defense (UTD) configuration CLI of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands as root on… | ||||
| CVE-2024-20303US | — | — | ||
A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause… | ||||
| CVE-2024-20278US | — | — | ||
A vulnerability in the NETCONF feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges to root on an affected device.
This vulnerabi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
- Cisco Security Advisory vom 2024-03-27external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan