7.5

CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

 This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 3.9.0as
Cisco ≫ Ios Xe Version 3.9.1s
Cisco ≫ Ios Xe Version 3.9.2s
Cisco ≫ Ios Xe Version 3.10.0s
Cisco ≫ Ios Xe Version 3.10.1s
Cisco ≫ Ios Xe Version 3.10.2s
Cisco ≫ Ios Xe Version 3.10.2ts
Cisco ≫ Ios Xe Version 3.10.3s
Cisco ≫ Ios Xe Version 3.10.4s
Cisco ≫ Ios Xe Version 3.10.5s
Cisco ≫ Ios Xe Version 3.10.6s
Cisco ≫ Ios Xe Version 3.10.7s
Cisco ≫ Ios Xe Version 3.10.8as
Cisco ≫ Ios Xe Version 3.10.8s
Cisco ≫ Ios Xe Version 3.10.9s
Cisco ≫ Ios Xe Version 3.10.10s
Cisco ≫ Ios Xe Version 3.11.0s
Cisco ≫ Ios Xe Version 3.11.1s
Cisco ≫ Ios Xe Version 3.11.2s
Cisco ≫ Ios Xe Version 3.11.3s
Cisco ≫ Ios Xe Version 3.11.4s
Cisco ≫ Ios Xe Version 3.12.0s
Cisco ≫ Ios Xe Version 3.12.1s
Cisco ≫ Ios Xe Version 3.12.2s
Cisco ≫ Ios Xe Version 3.12.3s
Cisco ≫ Ios Xe Version 3.12.4s
Cisco ≫ Ios Xe Version 3.13.0s
Cisco ≫ Ios Xe Version 3.13.1s
Cisco ≫ Ios Xe Version 3.13.2s
Cisco ≫ Ios Xe Version 3.13.3s
Cisco ≫ Ios Xe Version 3.13.4s
Cisco ≫ Ios Xe Version 3.13.5s
Cisco ≫ Ios Xe Version 3.13.6as
Cisco ≫ Ios Xe Version 3.13.6s
Cisco ≫ Ios Xe Version 3.13.7s
Cisco ≫ Ios Xe Version 3.13.8s
Cisco ≫ Ios Xe Version 3.13.9s
Cisco ≫ Ios Xe Version 3.13.10s
Cisco ≫ Ios Xe Version 3.14.0s
Cisco ≫ Ios Xe Version 3.14.1s
Cisco ≫ Ios Xe Version 3.14.2s
Cisco ≫ Ios Xe Version 3.14.3s
Cisco ≫ Ios Xe Version 3.14.4s
Cisco ≫ Ios Xe Version 3.15.0s
Cisco ≫ Ios Xe Version 3.15.1cs
Cisco ≫ Ios Xe Version 3.15.1s
Cisco ≫ Ios Xe Version 3.15.2s
Cisco ≫ Ios Xe Version 3.15.3s
Cisco ≫ Ios Xe Version 3.15.4s
Cisco ≫ Ios Xe Version 3.16.0cs
Cisco ≫ Ios Xe Version 3.16.0s
Cisco ≫ Ios Xe Version 3.16.1as
Cisco ≫ Ios Xe Version 3.16.2s
Cisco ≫ Ios Xe Version 3.16.3s
Cisco ≫ Ios Xe Version 3.16.4as
Cisco ≫ Ios Xe Version 3.16.4bs
Cisco ≫ Ios Xe Version 3.16.4ds
Cisco ≫ Ios Xe Version 3.16.5s
Cisco ≫ Ios Xe Version 3.16.6bs
Cisco ≫ Ios Xe Version 3.16.6s
Cisco ≫ Ios Xe Version 3.16.7as
Cisco ≫ Ios Xe Version 3.16.7bs
Cisco ≫ Ios Xe Version 3.16.7s
Cisco ≫ Ios Xe Version 3.16.8s
Cisco ≫ Ios Xe Version 3.16.9s
Cisco ≫ Ios Xe Version 3.16.10s
Cisco ≫ Ios Xe Version 3.17.0s
Cisco ≫ Ios Xe Version 3.17.1s
Cisco ≫ Ios Xe Version 3.17.2s
Cisco ≫ Ios Xe Version 3.17.3s
Cisco ≫ Ios Xe Version 3.17.4s
Cisco ≫ Ios Xe Version 3.18.2asp
Cisco ≫ Ios Xe Version 16.2.1
Cisco ≫ Ios Xe Version 16.2.2
Cisco ≫ Ios Xe Version 16.3.1
Cisco ≫ Ios Xe Version 16.3.1a
Cisco ≫ Ios Xe Version 16.3.2
Cisco ≫ Ios Xe Version 16.3.3
Cisco ≫ Ios Xe Version 16.3.4
Cisco ≫ Ios Xe Version 16.3.5
Cisco ≫ Ios Xe Version 16.3.6
Cisco ≫ Ios Xe Version 16.3.7
Cisco ≫ Ios Xe Version 16.3.8
Cisco ≫ Ios Xe Version 16.3.9
Cisco ≫ Ios Xe Version 16.3.10
Cisco ≫ Ios Xe Version 16.3.11
Cisco ≫ Ios Xe Version 16.4.1
Cisco ≫ Ios Xe Version 16.4.2
Cisco ≫ Ios Xe Version 16.4.3
Cisco ≫ Ios Xe Version 16.5.1
Cisco ≫ Ios Xe Version 16.5.1b
Cisco ≫ Ios Xe Version 16.5.2
Cisco ≫ Ios Xe Version 16.5.3
Cisco ≫ Ios Xe Version 16.6.1
Cisco ≫ Ios Xe Version 16.6.2
Cisco ≫ Ios Xe Version 16.6.3
Cisco ≫ Ios Xe Version 16.6.4
Cisco ≫ Ios Xe Version 16.6.5
Cisco ≫ Ios Xe Version 16.6.6
Cisco ≫ Ios Xe Version 16.6.7
Cisco ≫ Ios Xe Version 16.6.8
Cisco ≫ Ios Xe Version 16.6.9
Cisco ≫ Ios Xe Version 16.6.10
Cisco ≫ Ios Xe Version 16.7.1
Cisco ≫ Ios Xe Version 16.7.2
Cisco ≫ Ios Xe Version 16.7.3
Cisco ≫ Ios Xe Version 16.8.1
Cisco ≫ Ios Xe Version 16.8.1s
Cisco ≫ Ios Xe Version 16.8.2
Cisco ≫ Ios Xe Version 16.8.3
Cisco ≫ Ios Xe Version 16.9.1
Cisco ≫ Ios Xe Version 16.9.1s
Cisco ≫ Ios Xe Version 16.9.2
Cisco ≫ Ios Xe Version 16.9.3
Cisco ≫ Ios Xe Version 16.9.4
Cisco ≫ Ios Xe Version 16.9.5
Cisco ≫ Ios Xe Version 16.9.6
Cisco ≫ Ios Xe Version 16.9.7
Cisco ≫ Ios Xe Version 16.9.8
Cisco ≫ Ios Xe Version 16.10.1
Cisco ≫ Ios Xe Version 16.10.1a
Cisco ≫ Ios Xe Version 16.10.1b
Cisco ≫ Ios Xe Version 16.10.1e
Cisco ≫ Ios Xe Version 16.10.1s
Cisco ≫ Ios Xe Version 16.10.2
Cisco ≫ Ios Xe Version 16.10.3
Cisco ≫ Ios Xe Version 16.11.1
Cisco ≫ Ios Xe Version 16.11.1a
Cisco ≫ Ios Xe Version 16.11.1b
Cisco ≫ Ios Xe Version 16.11.1s
Cisco ≫ Ios Xe Version 16.11.2
Cisco ≫ Ios Xe Version 16.12.1
Cisco ≫ Ios Xe Version 16.12.1a
Cisco ≫ Ios Xe Version 16.12.1c
Cisco ≫ Ios Xe Version 16.12.1s
Cisco ≫ Ios Xe Version 16.12.2
Cisco ≫ Ios Xe Version 16.12.2s
Cisco ≫ Ios Xe Version 16.12.3
Cisco ≫ Ios Xe Version 16.12.3s
Cisco ≫ Ios Xe Version 16.12.4
Cisco ≫ Ios Xe Version 16.12.4a
Cisco ≫ Ios Xe Version 16.12.5
Cisco ≫ Ios Xe Version 16.12.6
Cisco ≫ Ios Xe Version 16.12.7
Cisco ≫ Ios Xe Version 16.12.8
Cisco ≫ Ios Xe Version 17.1.1
Cisco ≫ Ios Xe Version 17.1.1s
Cisco ≫ Ios Xe Version 17.1.1t
Cisco ≫ Ios Xe Version 17.1.3
Cisco ≫ Ios Xe Version 17.2.1
Cisco ≫ Ios Xe Version 17.2.1r
Cisco ≫ Ios Xe Version 17.2.1v
Cisco ≫ Ios Xe Version 17.2.2
Cisco ≫ Ios Xe Version 17.2.3
Cisco ≫ Ios Xe Version 17.3.1
Cisco ≫ Ios Xe Version 17.3.1a
Cisco ≫ Ios Xe Version 17.3.2
Cisco ≫ Ios Xe Version 17.3.3
Cisco ≫ Ios Xe Version 17.3.4
Cisco ≫ Ios Xe Version 17.3.4a
Cisco ≫ Ios Xe Version 17.3.5
Cisco ≫ Ios Xe Version 17.3.6
Cisco ≫ Ios Xe Version 17.3.7
Cisco ≫ Ios Xe Version 17.3.8
Cisco ≫ Ios Xe Version 17.3.8a
Cisco ≫ Ios Xe Version 17.4.1
Cisco ≫ Ios Xe Version 17.4.1a
Cisco ≫ Ios Xe Version 17.4.1b
Cisco ≫ Ios Xe Version 17.4.2
Cisco ≫ Ios Xe Version 17.5.1
Cisco ≫ Ios Xe Version 17.5.1a
Cisco ≫ Ios Xe Version 17.6.1
Cisco ≫ Ios Xe Version 17.6.1a
Cisco ≫ Ios Xe Version 17.6.2
Cisco ≫ Ios Xe Version 17.6.3
Cisco ≫ Ios Xe Version 17.6.3a
Cisco ≫ Ios Xe Version 17.6.4
Cisco ≫ Ios Xe Version 17.6.5
Cisco ≫ Ios Xe Version 17.6.5a
Cisco ≫ Ios Xe Version 17.6.6
Cisco ≫ Ios Xe Version 17.6.6a
Cisco ≫ Ios Xe Version 17.7.1
Cisco ≫ Ios Xe Version 17.7.1a
Cisco ≫ Ios Xe Version 17.7.2
Cisco ≫ Ios Xe Version 17.8.1
Cisco ≫ Ios Xe Version 17.8.1a
Cisco ≫ Ios Xe Version 17.9.1
Cisco ≫ Ios Xe Version 17.9.1a
Cisco ≫ Ios Xe Version 17.9.2
Cisco ≫ Ios Xe Version 17.9.2a
Cisco ≫ Ios Xe Version 17.9.3
Cisco ≫ Ios Xe Version 17.9.3a
Cisco ≫ Ios Xe Version 17.9.4
Cisco ≫ Ios Xe Version 17.9.4a
Cisco ≫ Ios Xe Version 17.10.1
Cisco ≫ Ios Xe Version 17.10.1a
Cisco ≫ Ios Xe Version 17.10.1b
Cisco ≫ Ios Xe Version 17.11.1
Cisco ≫ Ios Xe Version 17.11.1a
Cisco ≫ Ios Xe Version 17.12.1
Cisco ≫ Ios Xe Version 17.12.1a
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.54
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Cisco PSIRT 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-httpsrvr-dos-yOZThut
Vendor Advisory