Vulnerability Intelligence Report

CVE-2024-20455

A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because UTD improperly handles certain packets as those packets egress an SD-WAN IPsec tunnel. An attacker could exploit this vulnerability by sending crafted traffic through an SD-WAN IPsec tunnel that is configured on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: SD-WAN tunnels that are configured with Generic Routing Encapsulation (GRE) are not affected by this vulnerability.

No Active Exploit Signals

CVSS Base Score

8.6

HIGH

Exploitability:3.9

Impact Score:4.0

EPSS Probability:0.67%

Executive Threat Verdict

Evaluating...

Evaluating Threat Landscape...

Assessing known weaponization, exploitation telemetry, and federal advisories.

Attack Surface

—

Authentication

—

Weaponization

—

SSVC Action

—

Weaknesses (CWE)

CWE-371 ↗State Issues

Affected Products & Versions

Vendor	Product	Affected Versions
Cisco	Cisco IOS XE Software	17.1.1 (affected), 17.1.1a (affected), 17.1.1s (affected), 17.1.1t (affected), 17.1.3 (affected), 17.2.1 (affected), 17.2.1r (affected), 17.2.1a (affected), 17.2.1v (affected), 17.2.2 (affected), 17.2.3 (affected), 17.3.1 (affected), 17.3.2 (affected), 17.3.3 (affected), 17.3.1a (affected), 17.3.1w (affected), 17.3.2a (affected), 17.3.1x (affected), 17.3.1z (affected), 17.3.4 (affected), 17.3.5 (affected), 17.3.4a (affected), 17.3.6 (affected), 17.3.4b (affected), 17.3.4c (affected), 17.3.5a (affected), 17.3.5b (affected), 17.3.7 (affected), 17.3.8 (affected), 17.3.8a (affected), 17.4.1 (affected), 17.4.2 (affected), 17.4.1a (affected), 17.4.1b (affected), 17.4.2a (affected), 17.5.1 (affected), 17.5.1a (affected), 17.6.1 (affected), 17.6.2 (affected), 17.6.1w (affected), 17.6.1a (affected), 17.6.1x (affected), 17.6.3 (affected), 17.6.1y (affected), 17.6.1z (affected), 17.6.3a (affected), 17.6.4 (affected), 17.6.1z1 (affected), 17.6.5 (affected), 17.6.6 (affected), 17.6.6a (affected), 17.6.5a (affected), 17.7.1 (affected), 17.7.1a (affected), 17.7.1b (affected), 17.7.2 (affected), 17.10.1 (affected), 17.10.1a (affected), 17.10.1b (affected), 17.8.1 (affected), 17.8.1a (affected), 17.9.1 (affected), 17.9.1w (affected), 17.9.2 (affected), 17.9.1a (affected), 17.9.1x (affected), 17.9.1y (affected), 17.9.3 (affected), 17.9.2a (affected), 17.9.1x1 (affected), 17.9.3a (affected), 17.9.4 (affected), 17.9.1y1 (affected), 17.9.5 (affected), 17.9.4a (affected), 17.9.5a (affected), 17.9.5b (affected), 17.11.1 (affected), 17.11.1a (affected), 17.12.1 (affected), 17.12.1w (affected), 17.12.1a (affected), 17.12.2 (affected), 17.12.2a (affected), 17.13.1 (affected), 17.13.1a (affected), 17.11.99SW (affected)
Cisco	Cisco IOS XE Catalyst SD-WAN	17.5.1a (affected), 17.6.1a (affected), 17.6.2 (affected), 17.6.4 (affected), 17.7.1a (affected), 17.9.1a (affected), 17.9.2a (affected), 17.9.3a (affected), 17.9.4 (affected), 17.8.1a (affected), 17.10.1a (affected), 17.11.1a (affected), 17.12.1a (affected), 17.13.1a (affected)

Exploitation & Remediation

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗

No reference links found.

Threat Intelligence Signals

EPSS Score

0.666%

GitHub Advisory

GHSA-j9wc-h525-rvc7 ↗

CVSS Vector Breakdown

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality

Integrity

Availability

Identity & Timeline

Status	PUBLISHED
Assigning Authority	Cisco Systems, Inc. · Hosted Service · USA
Reserved	2023-11-08T15:08:07
Published	2024-09-25T16:18:50
Last Updated	2024-09-25T19:47:05

MITRE ATT&CK Mapping

Tactics

Techniques

CVE-2024-20455

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

CVE-2024-20455

—

Public Weaponization & Exploit Code Exploit-DB Catalog

Weaknesses (CWE)

Affected Products & Versions

Exploitation & Remediation

References & Technical Advisories

Threat Intelligence Signals

CVSS Vector Breakdown

Identity & Timeline

SSVC Prioritization

MITRE ATT&CK Mapping

Community Chatter & Buzz

Related Intelligence

SHARE INTELLIGENCE WIRE