Skip to content
fr Sign in
7.4 High

CVE-2024-20313 A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent…

Description

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS XE Software 17.11 17.11.1a → 17.11.99SW No fix stated
Cisco IOS XE Software 17.10 17.10.1a → 17.10.1 No fix stated
Cisco IOS XE Software 17.9 17.9.1w → 17.9.3 No fix stated
Cisco IOS XE Software 17.8 17.8.1a → 17.8.1 No fix stated
Cisco IOS XE Software 17.7 17.7.1a → 17.7.2 No fix stated
Cisco IOS XE Software 17.6 17.6.1w → 17.6.5 No fix stated
Cisco IOS XE Software 17.5 17.5.1a → 17.5.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS XE Software

The 248 CVEs of Cisco IOS XE Software →
CVE-2026-20311 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 6.3 Medium CVE-2026-20301 A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of… 8.6 High CVE-2026-20308 A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote… 4.3 Medium CVE-2026-20273 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering… 8.6 High
Track this CVE