CVEvulnerability
CVE-2024-20474
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-191
Description
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.
This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software.
Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
Affected configurations
• cisco anyconnect secure mobility client 4.9.00086
• cisco anyconnect secure mobility client 4.9.01095
• cisco anyconnect secure mobility client 4.9.02028
• cisco anyconnect secure mobility client 4.9.03047
• cisco anyconnect secure mobility client 4.9.03049
• cisco anyconnect secure mobility client 4.9.04043
• cisco anyconnect secure mobility client 4.9.04053
• cisco anyconnect secure mobility client 4.9.05042
• cisco anyconnect secure mobility client 4.9.06037
• cisco secure client 4.10.00093
• cisco secure client 4.10.01075
• cisco secure client 4.10.02086
• cisco secure client 4.10.03104
• cisco secure client 4.10.04065
• cisco secure client 4.10.04071
• cisco secure client 4.10.05085
• cisco secure client 4.10.05095
• cisco secure client 4.10.05111
• cisco secure client 4.10.06079
• cisco secure client 4.10.06090
• cisco secure client 4.10.07061
• cisco secure client 4.10.07062
• cisco secure client 4.10.07073
• cisco secure client 4.10.08025
• cisco secure client 4.10.08029
• cisco secure client 5.0.00238
• cisco secure client 5.0.00529
• cisco secure client 5.0.00556
• cisco secure client 5.0.01242
• cisco secure client 5.0.02075
• cisco secure client 5.0.03072
• cisco secure client 5.0.03076
• cisco secure client 5.0.04032
• cisco secure client 5.0.05040
• cisco secure client 5.1.0.136
• cisco secure client 5.1.1.42
• cisco secure client 5.1.2.42
• cisco secure client 5.1.3.62
Related
Weakness · CWE (1)
- CWE-191 Integer Underflow (Wrap or Wraparound) weakness