Lucene search

CiscoCVE-2024-20390

HistorySep 11, 2024 - 5:15 p.m.

CVE-2024-20390

2024-09-1117:15:12

CWE-940

cisco

web.nvd.nist.gov

cisco

ios xr software

xml agent

vulnerability

remote attacker

denial of service

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.3

Confidence

High

EPSS

Percentile

9.6%

JSON

A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on XML TCP listen port 38751.

This vulnerability is due to a lack of proper error validation of ingress XML packets. An attacker could exploit this vulnerability by sending a sustained, crafted stream of XML traffic to a targeted device. A successful exploit could allow the attacker to cause XML TCP port 38751 to become unreachable while the attack traffic persists.

Affected configurations

Vulners

Node

ciscoios_xr_softwareMatch6.5.3

ciscoios_xr_softwareMatch6.5.29

ciscoios_xr_softwareMatch6.5.1

ciscoios_xr_softwareMatch6.6.1

ciscoios_xr_softwareMatch6.5.2

ciscoios_xr_softwareMatch6.5.92

ciscoios_xr_softwareMatch6.5.15

ciscoios_xr_softwareMatch6.6.2

ciscoios_xr_softwareMatch7.0.1

ciscoios_xr_softwareMatch6.6.25

ciscoios_xr_softwareMatch6.5.26

ciscoios_xr_softwareMatch6.6.11

ciscoios_xr_softwareMatch6.5.25

ciscoios_xr_softwareMatch6.5.28

ciscoios_xr_softwareMatch6.5.93

ciscoios_xr_softwareMatch6.6.12

ciscoios_xr_softwareMatch6.5.90

ciscoios_xr_softwareMatch7.0.0

ciscoios_xr_softwareMatch7.1.1

ciscoios_xr_softwareMatch7.0.90

ciscoios_xr_softwareMatch6.6.3

ciscoios_xr_softwareMatch6.7.1

ciscoios_xr_softwareMatch7.0.2

ciscoios_xr_softwareMatch7.1.15

ciscoios_xr_softwareMatch7.2.0

ciscoios_xr_softwareMatch7.2.1

ciscoios_xr_softwareMatch7.1.2

ciscoios_xr_softwareMatch6.7.2

ciscoios_xr_softwareMatch7.0.11

ciscoios_xr_softwareMatch7.0.12

ciscoios_xr_softwareMatch7.0.14

ciscoios_xr_softwareMatch7.1.25

ciscoios_xr_softwareMatch6.6.4

ciscoios_xr_softwareMatch7.2.12

ciscoios_xr_softwareMatch7.3.1

ciscoios_xr_softwareMatch7.1.3

ciscoios_xr_softwareMatch6.7.3

ciscoios_xr_softwareMatch7.4.1

ciscoios_xr_softwareMatch7.2.2

ciscoios_xr_softwareMatch6.7.4

ciscoios_xr_softwareMatch6.5.31

ciscoios_xr_softwareMatch7.3.15

ciscoios_xr_softwareMatch7.3.16

ciscoios_xr_softwareMatch6.8.1

ciscoios_xr_softwareMatch7.4.15

ciscoios_xr_softwareMatch6.5.32

ciscoios_xr_softwareMatch7.3.2

ciscoios_xr_softwareMatch7.5.1

ciscoios_xr_softwareMatch7.4.16

ciscoios_xr_softwareMatch7.3.27

ciscoios_xr_softwareMatch7.6.1

ciscoios_xr_softwareMatch7.5.2

ciscoios_xr_softwareMatch7.8.1

ciscoios_xr_softwareMatch7.6.15

ciscoios_xr_softwareMatch7.5.12

ciscoios_xr_softwareMatch7.8.12

ciscoios_xr_softwareMatch7.3.3

ciscoios_xr_softwareMatch7.7.1

ciscoios_xr_softwareMatch6.8.2

ciscoios_xr_softwareMatch7.3.4

ciscoios_xr_softwareMatch7.4.2

ciscoios_xr_softwareMatch6.7.35

ciscoios_xr_softwareMatch6.9.1

ciscoios_xr_softwareMatch7.6.2

ciscoios_xr_softwareMatch7.5.3

ciscoios_xr_softwareMatch7.7.2

ciscoios_xr_softwareMatch6.9.2

ciscoios_xr_softwareMatch7.9.1

ciscoios_xr_softwareMatch7.10.1

ciscoios_xr_softwareMatch7.8.2

ciscoios_xr_softwareMatch7.5.4

ciscoios_xr_softwareMatch6.5.33

ciscoios_xr_softwareMatch7.8.22

ciscoios_xr_softwareMatch7.7.21

ciscoios_xr_softwareMatch7.9.2

ciscoios_xr_softwareMatch7.3.5

ciscoios_xr_softwareMatch7.5.5

ciscoios_xr_softwareMatch7.11.1

ciscoios_xr_softwareMatch7.9.21

ciscoios_xr_softwareMatch7.10.2

ciscoios_xr_softwareMatch24.1.1

ciscoios_xr_softwareMatch7.6.3

ciscoios_xr_softwareMatch7.3.6

ciscoios_xr_softwareMatch7.5.52

ciscoios_xr_softwareMatch7.11.2

ciscoios_xr_softwareMatch24.2.1

VendorProductVersionCPE
ciscoios_xr_software6.5.3cpe:2.3:o:cisco:ios_xr_software:6.5.3:*:*:*:*:*:*:*
ciscoios_xr_software6.5.29cpe:2.3:o:cisco:ios_xr_software:6.5.29:*:*:*:*:*:*:*
ciscoios_xr_software6.5.1cpe:2.3:o:cisco:ios_xr_software:6.5.1:*:*:*:*:*:*:*
ciscoios_xr_software6.6.1cpe:2.3:o:cisco:ios_xr_software:6.6.1:*:*:*:*:*:*:*
ciscoios_xr_software6.5.2cpe:2.3:o:cisco:ios_xr_software:6.5.2:*:*:*:*:*:*:*
ciscoios_xr_software6.5.92cpe:2.3:o:cisco:ios_xr_software:6.5.92:*:*:*:*:*:*:*
ciscoios_xr_software6.5.15cpe:2.3:o:cisco:ios_xr_software:6.5.15:*:*:*:*:*:*:*
ciscoios_xr_software6.6.2cpe:2.3:o:cisco:ios_xr_software:6.6.2:*:*:*:*:*:*:*
ciscoios_xr_software7.0.1cpe:2.3:o:cisco:ios_xr_software:7.0.1:*:*:*:*:*:*:*
ciscoios_xr_software6.6.25cpe:2.3:o:cisco:ios_xr_software:6.6.25:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xr_software	6.5.3	cpe:2.3:o:cisco:ios_xr_software:6.5.3:::::::*
cisco	ios_xr_software	6.5.29	cpe:2.3:o:cisco:ios_xr_software:6.5.29:::::::*
cisco	ios_xr_software	6.5.1	cpe:2.3:o:cisco:ios_xr_software:6.5.1:::::::*
cisco	ios_xr_software	6.6.1	cpe:2.3:o:cisco:ios_xr_software:6.6.1:::::::*
cisco	ios_xr_software	6.5.2	cpe:2.3:o:cisco:ios_xr_software:6.5.2:::::::*
cisco	ios_xr_software	6.5.92	cpe:2.3:o:cisco:ios_xr_software:6.5.92:::::::*
cisco	ios_xr_software	6.5.15	cpe:2.3:o:cisco:ios_xr_software:6.5.15:::::::*
cisco	ios_xr_software	6.6.2	cpe:2.3:o:cisco:ios_xr_software:6.6.2:::::::*
cisco	ios_xr_software	7.0.1	cpe:2.3:o:cisco:ios_xr_software:7.0.1:::::::*
cisco	ios_xr_software	6.6.25	cpe:2.3:o:cisco:ios_xr_software:6.6.25:::::::*

Rows per page:

1-10 of 861

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XR Software",
    "versions": [
      {
        "version": "6.5.3",
        "status": "affected"
      },
      {
        "version": "6.5.29",
        "status": "affected"
      },
      {
        "version": "6.5.1",
        "status": "affected"
      },
      {
        "version": "6.6.1",
        "status": "affected"
      },
      {
        "version": "6.5.2",
        "status": "affected"
      },
      {
        "version": "6.5.92",
        "status": "affected"
      },
      {
        "version": "6.5.15",
        "status": "affected"
      },
      {
        "version": "6.6.2",
        "status": "affected"
      },
      {
        "version": "7.0.1",
        "status": "affected"
      },
      {
        "version": "6.6.25",
        "status": "affected"
      },
      {
        "version": "6.5.26",
        "status": "affected"
      },
      {
        "version": "6.6.11",
        "status": "affected"
      },
      {
        "version": "6.5.25",
        "status": "affected"
      },
      {
        "version": "6.5.28",
        "status": "affected"
      },
      {
        "version": "6.5.93",
        "status": "affected"
      },
      {
        "version": "6.6.12",
        "status": "affected"
      },
      {
        "version": "6.5.90",
        "status": "affected"
      },
      {
        "version": "7.0.0",
        "status": "affected"
      },
      {
        "version": "7.1.1",
        "status": "affected"
      },
      {
        "version": "7.0.90",
        "status": "affected"
      },
      {
        "version": "6.6.3",
        "status": "affected"
      },
      {
        "version": "6.7.1",
        "status": "affected"
      },
      {
        "version": "7.0.2",
        "status": "affected"
      },
      {
        "version": "7.1.15",
        "status": "affected"
      },
      {
        "version": "7.2.0",
        "status": "affected"
      },
      {
        "version": "7.2.1",
        "status": "affected"
      },
      {
        "version": "7.1.2",
        "status": "affected"
      },
      {
        "version": "6.7.2",
        "status": "affected"
      },
      {
        "version": "7.0.11",
        "status": "affected"
      },
      {
        "version": "7.0.12",
        "status": "affected"
      },
      {
        "version": "7.0.14",
        "status": "affected"
      },
      {
        "version": "7.1.25",
        "status": "affected"
      },
      {
        "version": "6.6.4",
        "status": "affected"
      },
      {
        "version": "7.2.12",
        "status": "affected"
      },
      {
        "version": "7.3.1",
        "status": "affected"
      },
      {
        "version": "7.1.3",
        "status": "affected"
      },
      {
        "version": "6.7.3",
        "status": "affected"
      },
      {
        "version": "7.4.1",
        "status": "affected"
      },
      {
        "version": "7.2.2",
        "status": "affected"
      },
      {
        "version": "6.7.4",
        "status": "affected"
      },
      {
        "version": "6.5.31",
        "status": "affected"
      },
      {
        "version": "7.3.15",
        "status": "affected"
      },
      {
        "version": "7.3.16",
        "status": "affected"
      },
      {
        "version": "6.8.1",
        "status": "affected"
      },
      {
        "version": "7.4.15",
        "status": "affected"
      },
      {
        "version": "6.5.32",
        "status": "affected"
      },
      {
        "version": "7.3.2",
        "status": "affected"
      },
      {
        "version": "7.5.1",
        "status": "affected"
      },
      {
        "version": "7.4.16",
        "status": "affected"
      },
      {
        "version": "7.3.27",
        "status": "affected"
      },
      {
        "version": "7.6.1",
        "status": "affected"
      },
      {
        "version": "7.5.2",
        "status": "affected"
      },
      {
        "version": "7.8.1",
        "status": "affected"
      },
      {
        "version": "7.6.15",
        "status": "affected"
      },
      {
        "version": "7.5.12",
        "status": "affected"
      },
      {
        "version": "7.8.12",
        "status": "affected"
      },
      {
        "version": "7.3.3",
        "status": "affected"
      },
      {
        "version": "7.7.1",
        "status": "affected"
      },
      {
        "version": "6.8.2",
        "status": "affected"
      },
      {
        "version": "7.3.4",
        "status": "affected"
      },
      {
        "version": "7.4.2",
        "status": "affected"
      },
      {
        "version": "6.7.35",
        "status": "affected"
      },
      {
        "version": "6.9.1",
        "status": "affected"
      },
      {
        "version": "7.6.2",
        "status": "affected"
      },
      {
        "version": "7.5.3",
        "status": "affected"
      },
      {
        "version": "7.7.2",
        "status": "affected"
      },
      {
        "version": "6.9.2",
        "status": "affected"
      },
      {
        "version": "7.9.1",
        "status": "affected"
      },
      {
        "version": "7.10.1",
        "status": "affected"
      },
      {
        "version": "7.8.2",
        "status": "affected"
      },
      {
        "version": "7.5.4",
        "status": "affected"
      },
      {
        "version": "6.5.33",
        "status": "affected"
      },
      {
        "version": "7.8.22",
        "status": "affected"
      },
      {
        "version": "7.7.21",
        "status": "affected"
      },
      {
        "version": "7.9.2",
        "status": "affected"
      },
      {
        "version": "7.3.5",
        "status": "affected"
      },
      {
        "version": "7.5.5",
        "status": "affected"
      },
      {
        "version": "7.11.1",
        "status": "affected"
      },
      {
        "version": "7.9.21",
        "status": "affected"
      },
      {
        "version": "7.10.2",
        "status": "affected"
      },
      {
        "version": "24.1.1",
        "status": "affected"
      },
      {
        "version": "7.6.3",
        "status": "affected"
      },
      {
        "version": "7.3.6",
        "status": "affected"
      },
      {
        "version": "7.5.52",
        "status": "affected"
      },
      {
        "version": "7.11.2",
        "status": "affected"
      },
      {
        "version": "24.2.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-xml-tcpdos-ZEXvrU2S

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.3

Confidence

High

EPSS

Percentile

9.6%

JSON

Related for CVE-2024-20390