CVE-2024-20313

{"id": "CVE-2024-20313", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.8}]}, "published": "2024-04-24T21:15:46.797", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ospf-dos-dR9Sfrxp", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-120"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en la caracter\u00edstica OSPF versi\u00f3n 2 (OSPFv2) del software Cisco IOS XE podr\u00eda permitir que un atacante adyacente no autenticado provoque que un dispositivo afectado se recargue inesperadamente, lo que resultar\u00eda en una condici\u00f3n de denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a una validaci\u00f3n inadecuada de las actualizaciones OSPF procesadas por un dispositivo. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una actualizaci\u00f3n OSPF con formato incorrecto al dispositivo. Un exploit exitoso podr\u00eda permitir al atacante hacer que el dispositivo afectado se recargue, lo que resultar\u00eda en una condici\u00f3n DoS."}], "lastModified": "2024-04-30T14:43:04.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:17.11.99sw:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F7C157F-5569-4072-805F-7AF598F6B56F"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}