HIGH · 7.4

CVE-2024-20276

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerabilit...

Vulnerability Description

A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoIos15.5\(1\)sy5
CiscoCatalyst 6503-E-
CiscoCatalyst 6504-E-
CiscoCatalyst 6506-E-
CiscoCatalyst 6509-E-
CiscoCatalyst 6509-V-E-
CiscoCatalyst 6513-E-
CiscoCatalyst 6807-Xl-
CiscoCatalyst C6800-Sup6T-
CiscoCatalyst C6800-Sup6T-Xl-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2024-20276?

CVE-2024-20276 is a vulnerability with a CVSS score of 7.4 (HIGH). A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerabilit...

How severe is CVE-2024-20276?

CVE-2024-20276 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-20276?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios, Cisco Catalyst 6503-E, Cisco Catalyst 6504-E, Cisco Catalyst 6506-E, Cisco Catalyst 6509-E.