csirt@kutim:~/threat-intel/cve/CVE-2024-20474

Katalog CVE

CVSS 6.5 · Medium EPSS 0,62%

Kerentanan Integer Underflow (Wrap or Wraparound) pada cisco anyconnect secure mobility client, cisco secure client. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.

Rincian

Terbit di NVD
23 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-191: Integer Underflow (Wrap or Wraparound)
EPSS (30 hari)
0,62% peluang dieksploitasi; lebih tinggi dari 48,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco anyconnect secure mobility client Versi 4.9.00086
cisco anyconnect secure mobility client Versi 4.9.01095
cisco anyconnect secure mobility client Versi 4.9.02028
cisco anyconnect secure mobility client Versi 4.9.03047
cisco anyconnect secure mobility client Versi 4.9.03049
cisco anyconnect secure mobility client Versi 4.9.04043
cisco anyconnect secure mobility client Versi 4.9.04053
cisco anyconnect secure mobility client Versi 4.9.05042
cisco anyconnect secure mobility client Versi 4.9.06037
cisco secure client Versi 4.10.00093
cisco secure client Versi 4.10.01075
cisco secure client Versi 4.10.02086
cisco secure client Versi 4.10.03104
cisco secure client Versi 4.10.04065
cisco secure client Versi 4.10.04071
cisco secure client Versi 4.10.05085
cisco secure client Versi 4.10.05095
cisco secure client Versi 4.10.05111
cisco secure client Versi 4.10.06079
cisco secure client Versi 4.10.06090
cisco secure client Versi 4.10.07061
cisco secure client Versi 4.10.07062
cisco secure client Versi 4.10.07073
cisco secure client Versi 4.10.08025
cisco secure client Versi 4.10.08029
cisco secure client Versi 5.0.00238
cisco secure client Versi 5.0.00529
cisco secure client Versi 5.0.00556
cisco secure client Versi 5.0.01242
cisco secure client Versi 5.0.02075
cisco secure client Versi 5.0.03072
cisco secure client Versi 5.0.03076
cisco secure client Versi 5.0.04032
cisco secure client Versi 5.0.05040
cisco secure client Versi 5.1.0.136
cisco secure client Versi 5.1.1.42
cisco secure client Versi 5.1.2.42
cisco secure client Versi 5.1.3.62

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.