csirt@kutim:~/threat-intel/cve/CVE-2024-20309

Katalog CVE

CVSS 5.5 · Medium EPSS 0,10%

Kerentanan Signal Handler with Functionality that is not Asynchronous-Safe pada cisco ios xe. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop responding. This vulnerability is due to the incorrect handling of specific ingress traffic when flow control hardware is enabled on the AUX port. An attacker could exploit this vulnerability by reverse telnetting to the AUX port and sending specific data after connecting. A successful exploit could allow the attacker to cause the device to reset or stop responding, resulting in a denial of service (DoS) condition.

Rincian

Terbit di NVD
27 Maret 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-828: Signal Handler with Functionality that is not Asynchronous-Safe
EPSS (30 hari)
0,10% peluang dieksploitasi; lebih tinggi dari 0,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios xe Versi 3.2.0se
cisco ios xe Versi 3.2.1se
cisco ios xe Versi 3.2.2se
cisco ios xe Versi 3.2.3se
cisco ios xe Versi 3.3.0se
cisco ios xe Versi 3.3.0sq
cisco ios xe Versi 3.3.1se
cisco ios xe Versi 3.3.1sq
cisco ios xe Versi 3.3.2se
cisco ios xe Versi 3.3.3se
cisco ios xe Versi 3.3.4se
cisco ios xe Versi 3.3.5se
cisco ios xe Versi 3.4.0sq
cisco ios xe Versi 3.4.1sq
cisco ios xe Versi 3.5.0sq
cisco ios xe Versi 3.5.1sq
cisco ios xe Versi 3.5.2sq
cisco ios xe Versi 3.5.3sq
cisco ios xe Versi 3.5.4sq
cisco ios xe Versi 3.5.5sq
cisco ios xe Versi 3.5.6sq
cisco ios xe Versi 3.5.7sq
cisco ios xe Versi 3.5.8sq
cisco ios xe Versi 3.6.2ae
cisco ios xe Versi 3.6.2e
cisco ios xe Versi 3.6.5be
cisco ios xe Versi 3.6.7be
cisco ios xe Versi 3.6.9e
cisco ios xe Versi 3.6.10e
cisco ios xe Versi 3.7.0bs
cisco ios xe Versi 3.7.0s
cisco ios xe Versi 3.7.1as
cisco ios xe Versi 3.7.1s
cisco ios xe Versi 3.7.2s
cisco ios xe Versi 3.7.2ts
cisco ios xe Versi 3.7.3s
cisco ios xe Versi 3.7.4as
cisco ios xe Versi 3.7.4s
cisco ios xe Versi 3.7.5s
cisco ios xe Versi 3.7.6s
cisco ios xe Versi 3.7.7s
cisco ios xe Versi 3.8.0s
cisco ios xe Versi 3.8.1s
cisco ios xe Versi 3.8.2s
cisco ios xe Versi 3.9.0as
cisco ios xe Versi 3.9.0s
cisco ios xe Versi 3.9.1as
cisco ios xe Versi 3.9.1s
cisco ios xe Versi 3.9.2s
cisco ios xe Versi 3.10.0s
cisco ios xe Versi 3.10.1s
cisco ios xe Versi 3.10.1xbs
cisco ios xe Versi 3.10.2s
cisco ios xe Versi 3.10.2ts
cisco ios xe Versi 3.10.3s
cisco ios xe Versi 3.10.4s
cisco ios xe Versi 3.10.5s
cisco ios xe Versi 3.10.6s
cisco ios xe Versi 3.10.7s
cisco ios xe Versi 3.10.8as

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 343 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.