Strix
26.1K

CVE-2024-20294

MEDIUMCVSS 6.6/10EPSS 0.32%

Last modified

CVE-2024-20294 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device and having an authenticated user retrieve LLDP statistics from the affected device through CLI show commands or Simple Network Management Protocol (SNMP) requests. EPSS estimates a 0.32% chance of exploitation in the next 30 days.

Description

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device and having an authenticated user retrieve LLDP statistics from the affected device through CLI show commands or Simple Network Management Protocol (SNMP) requests. A successful exploit could allow the attacker to cause the LLDP service to crash and stop running on the affected device. In certain situations, the LLDP crash may result in a reload of the affected device. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).

Metrics

CVSS 3.1
6.6/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

EPSS Probability
0.32%

23.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoFirepower Extensible Operating System2.2.1.63
CiscoFirepower Extensible Operating System2.2.1.66
CiscoFirepower Extensible Operating System2.2.1.70
CiscoFirepower Extensible Operating System2.2.2.17
CiscoFirepower Extensible Operating System2.2.2.19
CiscoFirepower Extensible Operating System2.2.2.24
CiscoFirepower Extensible Operating System2.2.2.26
CiscoFirepower Extensible Operating System2.2.2.28
CiscoFirepower Extensible Operating System2.2.2.54
CiscoFirepower Extensible Operating System2.2.2.60
CiscoFirepower Extensible Operating System2.2.2.71
CiscoFirepower Extensible Operating System2.2.2.83
CiscoFirepower Extensible Operating System2.2.2.86
CiscoFirepower Extensible Operating System2.2.2.91
CiscoFirepower Extensible Operating System2.2.2.97
CiscoFirepower Extensible Operating System2.2.2.101
CiscoFirepower Extensible Operating System2.2.2.137
CiscoFirepower Extensible Operating System2.2.2.148
CiscoFirepower Extensible Operating System2.2.2.149
CiscoFirepower Extensible Operating System2.3.1.56
CiscoFirepower Extensible Operating System2.3.1.58
CiscoFirepower Extensible Operating System2.3.1.66
CiscoFirepower Extensible Operating System2.3.1.73
CiscoFirepower Extensible Operating System2.3.1.75
CiscoFirepower Extensible Operating System2.3.1.88
CiscoFirepower Extensible Operating System2.3.1.91
CiscoFirepower Extensible Operating System2.3.1.93
CiscoFirepower Extensible Operating System2.3.1.99
CiscoFirepower Extensible Operating System2.3.1.110
CiscoFirepower Extensible Operating System2.3.1.111
CiscoFirepower Extensible Operating System2.3.1.130
CiscoFirepower Extensible Operating System2.3.1.144
CiscoFirepower Extensible Operating System2.3.1.145
CiscoFirepower Extensible Operating System2.3.1.155
CiscoFirepower Extensible Operating System2.3.1.166
CiscoFirepower Extensible Operating System2.3.1.173
CiscoFirepower Extensible Operating System2.3.1.179
CiscoFirepower Extensible Operating System2.3.1.180
CiscoFirepower Extensible Operating System2.3.1.190
CiscoFirepower Extensible Operating System2.3.1.215
CiscoFirepower Extensible Operating System2.3.1.216
CiscoFirepower Extensible Operating System2.3.1.219
CiscoFirepower Extensible Operating System2.3.1.230
CiscoFirepower Extensible Operating System2.6.1.131
CiscoFirepower Extensible Operating System2.6.1.157
CiscoFirepower Extensible Operating System2.6.1.166
CiscoFirepower Extensible Operating System2.6.1.169
CiscoFirepower Extensible Operating System2.6.1.174
CiscoFirepower Extensible Operating System2.6.1.187
CiscoFirepower Extensible Operating System2.6.1.192

Showing 50 of 657 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-20294?
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device and having an authenticated user retrieve LLDP statistics from the affected device through CLI show commands or Simple Network Management Protocol (SNMP) requests. A successful exploit could allow the attacker to cause the LLDP service to crash and stop running on the affected device. In certain situations, the LLDP crash may result in a reload of the affected device. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).
How severe is CVE-2024-20294?
CVE-2024-20294 has a CVSS score of 6.6/10 (MEDIUM severity). The EPSS model estimates a 0.32% probability of exploitation in the next 30 days.
How do I fix CVE-2024-20294?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-20294?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST