CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.

• CWE-476
• CWE-476

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-httpsrvr-dos-yOZThutVendor Advisory

Published

Sep 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20430A vulnerability in Cisco Meraki Systems Manager (SM) Agent f…7.3
• CVE-2024-20431A vulnerability in the geolocation access control feature of…5.8
• CVE-2024-20432A vulnerability in the REST API and web UI of Cisco Nexus Da…8.8
• CVE-2024-20433A vulnerability in the Resource Reservation Protocol (RSVP) …7.5
• CVE-2024-20434A vulnerability in Cisco IOS XE Software could allow an unau…4.3
• CVE-2024-20435A vulnerability in the CLI of Cisco AsyncOS for Secure Web A…7.8
• CVE-2024-20437A vulnerability in the web-based management interface of Cis…8.8
• CVE-2024-20438A vulnerability in the REST API endpoints of Cisco NDFC coul…5.4
• CVE-2024-20439A vulnerability in Cisco Smart Licensing Utility (CSLU) coul…9.8
• CVE-2024-2044pgAdmin <= 8.3 is affected by a path-traversal vulnerability…9.9
• CVE-2024-20440A vulnerability in Cisco Smart Licensing Utility could allow…7.5
• CVE-2024-20441A vulnerability in a specific REST API endpoint of Cisco NDF…6.5