CVE-2024-20309

Summary

CVE-2024-20309 is a vulnerability affecting Cisco IOS XE Software's auxiliary asynchronous port (AUX) functions. This issue stems from the improper handling of specific ingress traffic when flow control hardware is enabled on the AUX port. A local, authenticated attacker can exploit this flaw by reverse telnetting to the AUX port and sending tailored data post-connection. A successful attack may result in the targeted device reloading or becoming unresponsive, leading to a denial of service (DoS) condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.