CVEvulnerability
CVE-2024-20259
8.6 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-122, CWE-787
Description
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.
Affected configurations
• cisco ios xe 17.1.1
• cisco ios xe 17.1.1a
• cisco ios xe 17.1.1s
• cisco ios xe 17.1.1t
• cisco ios xe 17.1.3
• cisco ios xe 17.2.1
• cisco ios xe 17.2.1a
• cisco ios xe 17.2.1r
• cisco ios xe 17.2.1v
• cisco ios xe 17.2.2
• cisco ios xe 17.2.3
• cisco ios xe 17.3.1
• cisco ios xe 17.3.1a
• cisco ios xe 17.3.1w
• cisco ios xe 17.3.1x
• cisco ios xe 17.3.1z
• cisco ios xe 17.3.2
• cisco ios xe 17.3.2a
• cisco ios xe 17.3.3
• cisco ios xe 17.3.4
• cisco ios xe 17.3.4a
• cisco ios xe 17.3.4b
• cisco ios xe 17.3.4c
• cisco ios xe 17.3.5
• cisco ios xe 17.3.5a
• cisco ios xe 17.3.5b
• cisco ios xe 17.3.6
• cisco ios xe 17.3.7
• cisco ios xe 17.3.8
• cisco ios xe 17.3.8a
• cisco ios xe 17.4.1
• cisco ios xe 17.4.1a
• cisco ios xe 17.4.1b
• cisco ios xe 17.4.2
• cisco ios xe 17.4.2a
• cisco ios xe 17.5.1
• cisco ios xe 17.5.1a
• cisco ios xe 17.6.1
• cisco ios xe 17.6.1a
• cisco ios xe 17.6.1w
• cisco ios xe 17.6.1x
• cisco ios xe 17.6.1y
• cisco ios xe 17.6.1z
• cisco ios xe 17.6.1z1
• cisco ios xe 17.6.2
• cisco ios xe 17.6.3
• cisco ios xe 17.6.3a
• cisco ios xe 17.6.4
• cisco ios xe 17.6.5
• cisco ios xe 17.6.5a
• cisco ios xe 17.6.6
• cisco ios xe 17.6.6a
• cisco ios xe 17.7.1
• cisco ios xe 17.7.1a
• cisco ios xe 17.7.1b
• cisco ios xe 17.7.2
• cisco ios xe 17.8.1
• cisco ios xe 17.8.1a
• cisco ios xe 17.9.1
• cisco ios xe 17.9.1a
… and 20 more