CVE-2024-20344

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 29, 2024
CWE ID 400

Summary

CVE-2024-20344 is a newly disclosed vulnerability that affects Cisco UCS 6400 and 6500 Series Fabric Interconnects in Intersight Managed Mode (IMM). The issue stems from insufficient rate-limiting of TCP connections to the Device Console UI, making it susceptible to denial of service (DoS) attacks. An attacker can cause a crash of the Device Console UI process by flooding it with a high volume of TCP packets. Consequently, the interface becomes unresponsive, leading to a DoS condition. To restore full functionality, a manual reload of the fabric interconnect is required.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share