CVE-2024-20294

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Feb 29, 2024
CWE ID 805

Summary

CVE-2024-20294 is a vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software. It can be exploited by an unauthenticated, adjacent attacker to cause a denial of service (DoS) on the affected device. The vulnerability occurs due to improper handling of specific fields in an LLDP frame. To exploit this vulnerability, the attacker would need to be directly connected to the affected device. Remediation involves applying the necessary updates or patches provided by Cisco. The potential danger for organizations is that a successful exploit could lead to a crash of the LLDP service and potentially result in a reload of the affected device.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-20294 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options