CVE-2024-20390
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) on XML TCP listen port 38751.
This vulnerability is due to a lack of proper error validation of ingress XML packets. An attacker could exploit this vulnerability by sending a sustained, crafted stream of XML traffic to a targeted device. A successful exploit could allow the attacker to cause XML TCP port 38751 to become unreachable while the attack traffic persists.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco IOS XR Software | 6.5.3 | affected |
| Cisco | Cisco IOS XR Software | 6.5.29 | affected |
| Cisco | Cisco IOS XR Software | 6.5.1 | affected |
| Cisco | Cisco IOS XR Software | 6.6.1 | affected |
| Cisco | Cisco IOS XR Software | 6.5.2 | affected |
| Cisco | Cisco IOS XR Software | 6.5.92 | affected |
| Cisco | Cisco IOS XR Software | 6.5.15 | affected |
| Cisco | Cisco IOS XR Software | 6.6.2 | affected |
| Cisco | Cisco IOS XR Software | 7.0.1 | affected |
| Cisco | Cisco IOS XR Software | 6.6.25 | affected |
| Cisco | Cisco IOS XR Software | 6.5.26 | affected |
| Cisco | Cisco IOS XR Software | 6.6.11 | affected |
| Cisco | Cisco IOS XR Software | 6.5.25 | affected |
| Cisco | Cisco IOS XR Software | 6.5.28 | affected |
| Cisco | Cisco IOS XR Software | 6.5.93 | affected |
| Cisco | Cisco IOS XR Software | 6.6.12 | affected |
| Cisco | Cisco IOS XR Software | 6.5.90 | affected |
| Cisco | Cisco IOS XR Software | 7.0.0 | affected |
| Cisco | Cisco IOS XR Software | 7.1.1 | affected |
| Cisco | Cisco IOS XR Software | 7.0.90 | affected |
| Cisco | Cisco IOS XR Software | 6.6.3 | affected |
| Cisco | Cisco IOS XR Software | 6.7.1 | affected |
| Cisco | Cisco IOS XR Software | 7.0.2 | affected |
| Cisco | Cisco IOS XR Software | 7.1.15 | affected |
| Cisco | Cisco IOS XR Software | 7.2.0 | affected |
| Cisco | Cisco IOS XR Software | 7.2.1 | affected |
| Cisco | Cisco IOS XR Software | 7.1.2 | affected |
| Cisco | Cisco IOS XR Software | 6.7.2 | affected |
| Cisco | Cisco IOS XR Software | 7.0.11 | affected |
| Cisco | Cisco IOS XR Software | 7.0.12 | affected |
| Cisco | Cisco IOS XR Software | 7.0.14 | affected |
| Cisco | Cisco IOS XR Software | 7.1.25 | affected |
| Cisco | Cisco IOS XR Software | 6.6.4 | affected |
| Cisco | Cisco IOS XR Software | 7.2.12 | affected |
| Cisco | Cisco IOS XR Software | 7.3.1 | affected |
| Cisco | Cisco IOS XR Software | 7.1.3 | affected |
| Cisco | Cisco IOS XR Software | 6.7.3 | affected |
| Cisco | Cisco IOS XR Software | 7.4.1 | affected |
| Cisco | Cisco IOS XR Software | 7.2.2 | affected |
| Cisco | Cisco IOS XR Software | 6.7.4 | affected |
| Cisco | Cisco IOS XR Software | 6.5.31 | affected |
| Cisco | Cisco IOS XR Software | 7.3.15 | affected |
| Cisco | Cisco IOS XR Software | 7.3.16 | affected |
| Cisco | Cisco IOS XR Software | 6.8.1 | affected |
| Cisco | Cisco IOS XR Software | 7.4.15 | affected |
| Cisco | Cisco IOS XR Software | 6.5.32 | affected |
| Cisco | Cisco IOS XR Software | 7.3.2 | affected |
| Cisco | Cisco IOS XR Software | 7.5.1 | affected |
| Cisco | Cisco IOS XR Software | 7.4.16 | affected |
| Cisco | Cisco IOS XR Software | 7.3.27 | affected |
| Cisco | Cisco IOS XR Software | 7.6.1 | affected |
| Cisco | Cisco IOS XR Software | 7.5.2 | affected |
| Cisco | Cisco IOS XR Software | 7.8.1 | affected |
| Cisco | Cisco IOS XR Software | 7.6.15 | affected |
| Cisco | Cisco IOS XR Software | 7.5.12 | affected |
| Cisco | Cisco IOS XR Software | 7.8.12 | affected |
| Cisco | Cisco IOS XR Software | 7.3.3 | affected |
| Cisco | Cisco IOS XR Software | 7.7.1 | affected |
| Cisco | Cisco IOS XR Software | 6.8.2 | affected |
| Cisco | Cisco IOS XR Software | 7.3.4 | affected |
| Cisco | Cisco IOS XR Software | 7.4.2 | affected |
| Cisco | Cisco IOS XR Software | 6.7.35 | affected |
| Cisco | Cisco IOS XR Software | 6.9.1 | affected |
| Cisco | Cisco IOS XR Software | 7.6.2 | affected |
| Cisco | Cisco IOS XR Software | 7.5.3 | affected |
| Cisco | Cisco IOS XR Software | 7.7.2 | affected |
| Cisco | Cisco IOS XR Software | 6.9.2 | affected |
| Cisco | Cisco IOS XR Software | 7.9.1 | affected |
| Cisco | Cisco IOS XR Software | 7.10.1 | affected |
| Cisco | Cisco IOS XR Software | 7.8.2 | affected |
| Cisco | Cisco IOS XR Software | 7.5.4 | affected |
| Cisco | Cisco IOS XR Software | 6.5.33 | affected |
| Cisco | Cisco IOS XR Software | 7.8.22 | affected |
| Cisco | Cisco IOS XR Software | 7.7.21 | affected |
| Cisco | Cisco IOS XR Software | 7.9.2 | affected |
| Cisco | Cisco IOS XR Software | 7.3.5 | affected |
| Cisco | Cisco IOS XR Software | 7.5.5 | affected |
| Cisco | Cisco IOS XR Software | 7.11.1 | affected |
| Cisco | Cisco IOS XR Software | 7.9.21 | affected |
| Cisco | Cisco IOS XR Software | 7.10.2 | affected |
| Cisco | Cisco IOS XR Software | 24.1.1 | affected |
| Cisco | Cisco IOS XR Software | 7.6.3 | affected |
| Cisco | Cisco IOS XR Software | 7.3.6 | affected |
| Cisco | Cisco IOS XR Software | 7.5.52 | affected |
| Cisco | Cisco IOS XR Software | 7.11.2 | affected |
| Cisco | Cisco IOS XR Software | 24.2.1 | affected |
Weaknesses
- CWE-940: Improper Verification of Source of a Communication Channel
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.