CVEvulnerability

CVE-2024-20474

6.5 MEDIUM Published 2024-10-23 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-191

Description

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.

Affected configurations

• cisco anyconnect secure mobility client 4.9.00086 • cisco anyconnect secure mobility client 4.9.01095 • cisco anyconnect secure mobility client 4.9.02028 • cisco anyconnect secure mobility client 4.9.03047 • cisco anyconnect secure mobility client 4.9.03049 • cisco anyconnect secure mobility client 4.9.04043 • cisco anyconnect secure mobility client 4.9.04053 • cisco anyconnect secure mobility client 4.9.05042 • cisco anyconnect secure mobility client 4.9.06037 • cisco secure client 4.10.00093 • cisco secure client 4.10.01075 • cisco secure client 4.10.02086 • cisco secure client 4.10.03104 • cisco secure client 4.10.04065 • cisco secure client 4.10.04071 • cisco secure client 4.10.05085 • cisco secure client 4.10.05095 • cisco secure client 4.10.05111 • cisco secure client 4.10.06079 • cisco secure client 4.10.06090 • cisco secure client 4.10.07061 • cisco secure client 4.10.07062 • cisco secure client 4.10.07073 • cisco secure client 4.10.08025 • cisco secure client 4.10.08029 • cisco secure client 5.0.00238 • cisco secure client 5.0.00529 • cisco secure client 5.0.00556 • cisco secure client 5.0.01242 • cisco secure client 5.0.02075 • cisco secure client 5.0.03072 • cisco secure client 5.0.03076 • cisco secure client 5.0.04032 • cisco secure client 5.0.05040 • cisco secure client 5.1.0.136 • cisco secure client 5.1.1.42 • cisco secure client 5.1.2.42 • cisco secure client 5.1.3.62

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References