CVE-2024-20276
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2024
Last modified:
05/08/2025
Description
A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly.<br />
<br />
This vulnerability is due to improper handling of process-switched traffic. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
Impact
Base Score 3.x
7.40
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:cisco:ios:15.5\(1\)sy5:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy6:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy7:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy8:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy9:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy10:*:*:*:*:*:*:* | ||
| cpe:2.3:o:cisco:ios:15.5\(1\)sy11:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6503-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6504-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6506-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6509-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6509-v-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6513-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_6807-xl:-:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:catalyst_c6800-sup6t:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page