csirt@kutim:~/threat-intel/cve/CVE-2024-20312

Katalog CVE

CVSS 7.4 · High EPSS 0,26%

Kerentanan NULL Pointer Dereference pada cisco ios. Skor CVSS 3.1 7.4 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device after forming an adjacency. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device and have formed an adjacency.

Rincian

Terbit di NVD
27 Maret 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.4 (High), sumber cisco.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-476: NULL Pointer Dereference
EPSS (30 hari)
0,26% peluang dieksploitasi; lebih tinggi dari 15,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 15.0(1)ex
cisco ios Versi 15.1(1)sy
cisco ios Versi 15.1(1)sy1
cisco ios Versi 15.1(1)sy2
cisco ios Versi 15.1(1)sy3
cisco ios Versi 15.1(1)sy4
cisco ios Versi 15.1(1)sy5
cisco ios Versi 15.1(1)sy6
cisco ios Versi 15.1(2)sg
cisco ios Versi 15.1(2)sg1
cisco ios Versi 15.1(2)sg2
cisco ios Versi 15.1(2)sg3
cisco ios Versi 15.1(2)sg4
cisco ios Versi 15.1(2)sg5
cisco ios Versi 15.1(2)sg6
cisco ios Versi 15.1(2)sg7
cisco ios Versi 15.1(2)sg8
cisco ios Versi 15.1(2)sy
cisco ios Versi 15.1(2)sy1
cisco ios Versi 15.1(2)sy2
cisco ios Versi 15.1(2)sy3
cisco ios Versi 15.1(2)sy4
cisco ios Versi 15.1(2)sy4a
cisco ios Versi 15.1(2)sy5
cisco ios Versi 15.1(2)sy6
cisco ios Versi 15.1(2)sy7
cisco ios Versi 15.1(2)sy8
cisco ios Versi 15.1(2)sy9
cisco ios Versi 15.1(2)sy10
cisco ios Versi 15.1(2)sy11
cisco ios Versi 15.1(2)sy12
cisco ios Versi 15.1(2)sy13
cisco ios Versi 15.1(2)sy14
cisco ios Versi 15.1(2)sy15
cisco ios Versi 15.1(2)sy16
cisco ios Versi 15.2(1)e
cisco ios Versi 15.2(1)e1
cisco ios Versi 15.2(1)e2
cisco ios Versi 15.2(1)e3
cisco ios Versi 15.2(1)ey
cisco ios Versi 15.2(1)s
cisco ios Versi 15.2(1)s1
cisco ios Versi 15.2(1)s2
cisco ios Versi 15.2(1)sy
cisco ios Versi 15.2(1)sy0a
cisco ios Versi 15.2(1)sy1
cisco ios Versi 15.2(1)sy1a
cisco ios Versi 15.2(1)sy2
cisco ios Versi 15.2(1)sy3
cisco ios Versi 15.2(1)sy4
cisco ios Versi 15.2(1)sy5
cisco ios Versi 15.2(1)sy6
cisco ios Versi 15.2(1)sy7
cisco ios Versi 15.2(1)sy8
cisco ios Versi 15.2(2)e
cisco ios Versi 15.2(2)e1
cisco ios Versi 15.2(2)e2
cisco ios Versi 15.2(2)e3
cisco ios Versi 15.2(2)e4
cisco ios Versi 15.2(2)e5

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 811 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.