CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.

• cisco ios xe 3.9.0as • cisco ios xe 3.9.1s • cisco ios xe 3.9.2s • cisco ios xe 3.10.0s • cisco ios xe 3.10.1s • cisco ios xe 3.10.2s • cisco ios xe 3.10.2ts • cisco ios xe 3.10.3s • cisco ios xe 3.10.4s • cisco ios xe 3.10.5s • cisco ios xe 3.10.6s • cisco ios xe 3.10.7s • cisco ios xe 3.10.8as • cisco ios xe 3.10.8s • cisco ios xe 3.10.9s • cisco ios xe 3.10.10s • cisco ios xe 3.11.0s • cisco ios xe 3.11.1s • cisco ios xe 3.11.2s • cisco ios xe 3.11.3s • cisco ios xe 3.11.4s • cisco ios xe 3.12.0s • cisco ios xe 3.12.1s • cisco ios xe 3.12.2s • cisco ios xe 3.12.3s • cisco ios xe 3.12.4s • cisco ios xe 3.13.0s • cisco ios xe 3.13.1s • cisco ios xe 3.13.2s • cisco ios xe 3.13.3s • cisco ios xe 3.13.4s • cisco ios xe 3.13.5s • cisco ios xe 3.13.6as • cisco ios xe 3.13.6s • cisco ios xe 3.13.7s • cisco ios xe 3.13.8s • cisco ios xe 3.13.9s • cisco ios xe 3.13.10s • cisco ios xe 3.14.0s • cisco ios xe 3.14.1s • cisco ios xe 3.14.2s • cisco ios xe 3.14.3s • cisco ios xe 3.14.4s • cisco ios xe 3.15.0s • cisco ios xe 3.15.1cs • cisco ios xe 3.15.1s • cisco ios xe 3.15.2s • cisco ios xe 3.15.3s • cisco ios xe 3.15.4s • cisco ios xe 3.16.0cs • cisco ios xe 3.16.0s • cisco ios xe 3.16.1as • cisco ios xe 3.16.2s • cisco ios xe 3.16.3s • cisco ios xe 3.16.4as • cisco ios xe 3.16.4bs • cisco ios xe 3.16.4ds • cisco ios xe 3.16.5s • cisco ios xe 3.16.6bs • cisco ios xe 3.16.6s … and 141 more