CVE-2024-20436
Oct. 8, 2024, 9 p.m.
7.5
High
Description
A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Cisco |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-476
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| o | cisco | ios_xe | 3.9.0as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.9.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.9.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.2ts | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.5s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.6s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.7s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.8as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.8s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.9s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.10.10s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.11.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.11.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.11.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.11.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.11.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.12.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.12.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.12.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.12.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.12.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.5s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.6as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.6s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.7s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.8s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.9s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.13.10s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.14.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.14.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.14.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.14.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.14.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.1cs | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.15.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.0cs | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.1as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.4as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.4bs | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.4ds | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.5s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.6bs | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.6s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.7as | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.7bs | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.7s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.8s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.9s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.16.10s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.17.0s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.17.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.17.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.17.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.17.4s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 3.18.2asp | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.2.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.2.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.7 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.8 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.9 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.10 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.3.11 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.4.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.4.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.4.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.5.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.5.1b | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.5.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.5.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.7 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.8 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.9 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.6.10 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.7.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.7.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.7.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.8.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.8.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.8.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.8.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.7 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.9.8 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.1b | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.1e | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.10.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.11.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.11.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.11.1b | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.11.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.11.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.1c | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.2s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.3s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.4a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.7 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 16.12.8 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.1.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.1.1s | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.1.1t | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.1.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.2.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.2.1r | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.2.1v | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.2.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.2.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.4a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.7 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.8 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.3.8a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.4.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.4.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.4.1b | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.4.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.5.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.5.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.3a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.5 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.5a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.6 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.6.6a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.7.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.7.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.7.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.8.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.8.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.2 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.2a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.3 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.3a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.4 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.9.4a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.10.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.10.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.10.1b | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.11.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.11.1a | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.12.1 | / | / | / | / | / | / | / |
| o | cisco | ios_xe | 17.12.1a | / | / | / | / | / | / | / |
Tags
CVSS Score
CVSS Data - 3.1
- Attack Vector: NETWORK
- Attack Complexity: LOW
- Privileges Required: NONE
- Scope: UNCHANGED
- Confidentiality Impact: NONE
- Integrity Impact: NONE
- Availability Impact: HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
Published: Sept. 25, 2024, 5:15 p.m.
Last Modified: Oct. 8, 2024, 9 p.m.
Last Modified: Oct. 8, 2024, 9 p.m.
Status : Analyzed
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
ykramarz@cisco.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.