Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2024-20319 |
CWE-ID | CWE-284 |
Exploitation vector | Local network |
Public exploit | N/A |
Vulnerable software |
Cisco IOS XR Operating systems & Components / Operating system Cisco 8000 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8201 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8202 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8808 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8812 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8818 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9000 Series Aggregation Services Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9001 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9006 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9010 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9901 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9902 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9903 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9904 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9906 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9910 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9912 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 16-Slot Line Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 16-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 4-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 8-Slot Line Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Fabric Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Line Card Chassis (Dual) Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Line Card Chassis (Multi) Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 4-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X 16-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco IOS XRv 9000 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4009 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4016 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-12Z20G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-12Z20G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-24Q8L2DD-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-24Z8Q2C-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-28Z4C-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-28Z4C-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-6Z14S-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-6Z18G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-ACC-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-FH-AGG Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-FH-CSR-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-12Z16G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-12Z16G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z4G8Q2C-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z4G8Q2C-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z8Q2C-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-4Z14G2Q-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-4Z14G2Q-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-6Z18G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-6Z18G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-8Z16G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-8Z16G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-ACC-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS-E Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS-E-CC Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-7-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-7-SYS-E Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 6008 - 8-Slot Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1002 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1004 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1010 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 4000 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 500 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5000 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5002 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5011 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 540 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 540 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5500 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5501 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5501-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5502 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5502-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5504 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5508 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5516 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24Q6H-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24Q6H-SS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-36H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-36H-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-48Q6H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-HD-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-SE-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 560 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 560 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5700 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57B1-5DSE-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57B1-6D24-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57C3-MOD Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 6000 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System NCS-57C1-48Q6-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System NCS-57D2-18DD-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9922 Router Client/Desktop applications / Software for system administration Cisco Carrier Routing System Hardware solutions / Firmware Cisco Network Convergence System 1000 Series Hardware solutions / Firmware |
Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU87514
Risk: Low
CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-20319
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the UDP forwarding code. A remote attacker on the local network can bypass implemented security restrictions and communicate to the device on the configured SNMP ports.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco IOS XR: - - 24.1
Cisco 8000 Series Routers: All versions
Cisco 8201 Router: All versions
Cisco 8202 Router: All versions
Cisco 8808 Router: All versions
Cisco 8812 Router: All versions
Cisco 8818 Router: All versions
Cisco ASR 9000 Series Aggregation Services Routers: All versions
Cisco ASR 9001 Router: All versions
Cisco ASR 9006 Router: All versions
Cisco ASR 9010 Router: All versions
Cisco ASR 9901 Router: All versions
Cisco ASR 9902 Router: All versions
Cisco ASR 9903 Router: All versions
Cisco ASR 9904 Router: All versions
Cisco ASR 9906 Router: All versions
Cisco ASR 9910 Router: All versions
Cisco ASR 9912 Router: All versions
Cisco ASR 9922 Router: All versions
Cisco CRS-1 16-Slot Line Card Chassis: All versions
Cisco CRS-1 16-Slot Single-Shelf System: All versions
Cisco CRS-1 4-Slot Single-Shelf System: All versions
Cisco CRS-1 8-Slot Line Card Chassis: All versions
Cisco CRS-1 8-Slot Single-Shelf System: All versions
Cisco CRS-1 Fabric Card Chassis: All versions
Cisco CRS-1 Line Card Chassis (Dual): All versions
Cisco CRS-1 Line Card Chassis (Multi): All versions
Cisco CRS-1 Multishelf System: All versions
Cisco CRS-3 4-Slot Single-Shelf System: All versions
Cisco CRS-3 8-Slot Single-Shelf System: All versions
Cisco CRS-3 Multishelf System: All versions
Cisco CRS-X 16-Slot Single-Shelf System: All versions
Cisco CRS-X 8-Slot Single-Shelf System: All versions
Cisco CRS-X Multishelf System: All versions
Cisco Carrier Routing System: All versions
Cisco IOS XRv 9000 Router: All versions
Cisco NCS 4001: All versions
Cisco NCS 4009: All versions
Cisco NCS 4016: All versions
Cisco NCS 540-12Z20G-SYS-A Router: All versions
Cisco NCS 540-12Z20G-SYS-D Router: All versions
Cisco NCS 540-24Q8L2DD-SYS Router: All versions
Cisco NCS 540-24Z8Q2C-SYS Router: All versions
Cisco NCS 540-28Z4C-SYS-A Router: All versions
Cisco NCS 540-28Z4C-SYS-D Router: All versions
Cisco NCS 540-6Z14S-SYS-D Router: All versions
Cisco NCS 540-6Z18G-SYS-D Router: All versions
Cisco NCS 540-ACC-SYS Router: All versions
Cisco NCS 540-FH-AGG Router: All versions
Cisco NCS 540-FH-CSR-SYS Router: All versions
Cisco NCS 540X-12Z16G-SYS-A Router: All versions
Cisco NCS 540X-12Z16G-SYS-D Router: All versions
Cisco NCS 540X-16Z4G8Q2C-A Router: All versions
Cisco NCS 540X-16Z4G8Q2C-D Router: All versions
Cisco NCS 540X-16Z8Q2C-D Router: All versions
Cisco NCS 540X-4Z14G2Q-A Router: All versions
Cisco NCS 540X-4Z14G2Q-D Router: All versions
Cisco NCS 540X-6Z18G-SYS-A Router: All versions
Cisco NCS 540X-6Z18G-SYS-D Router: All versions
Cisco NCS 540X-8Z16G-SYS-A Router: All versions
Cisco NCS 540X-8Z16G-SYS-D Router: All versions
Cisco NCS 540X-ACC-SYS Router: All versions
Cisco NCS 560-4-SYS Router: All versions
Cisco NCS 560-4-SYS-E Router: All versions
Cisco NCS 560-4-SYS-E-CC Router: All versions
Cisco NCS 560-7-SYS Router: All versions
Cisco NCS 560-7-SYS-E Router: All versions
Cisco NCS 6008 - 8-Slot Chassis: All versions
Cisco Network Convergence System 1000 Series: All versions
Cisco Network Convergence System 1001: All versions
Cisco Network Convergence System 1002: All versions
Cisco Network Convergence System 1004: All versions
Cisco Network Convergence System 1010: All versions
Cisco Network Convergence System 4000 Series: All versions
Cisco Network Convergence System 500 Series Routers: All versions
Cisco Network Convergence System 5000 Series: All versions
Cisco Network Convergence System 5001: All versions
Cisco Network Convergence System 5002: All versions
Cisco Network Convergence System 5011: All versions
Cisco Network Convergence System 540 Router: All versions
Cisco Network Convergence System 540 Series Routers: All versions
Cisco Network Convergence System 5500 Series: All versions
Cisco Network Convergence System 5501: All versions
Cisco Network Convergence System 5501-SE: All versions
Cisco Network Convergence System 5502: All versions
Cisco Network Convergence System 5502-SE: All versions
Cisco Network Convergence System 5504: All versions
Cisco Network Convergence System 5508: All versions
Cisco Network Convergence System 5516: All versions
Cisco Network Convergence System 55A1-24H: All versions
Cisco Network Convergence System 55A1-24Q6H-S: All versions
Cisco Network Convergence System 55A1-24Q6H-SS: All versions
Cisco Network Convergence System 55A1-36H: All versions
Cisco Network Convergence System 55A1-36H-SE: All versions
Cisco Network Convergence System 55A1-48Q6H: All versions
Cisco Network Convergence System 55A2-MOD-HD-S: All versions
Cisco Network Convergence System 55A2-MOD-S: All versions
Cisco Network Convergence System 55A2-MOD-SE-S: All versions
Cisco Network Convergence System 560 Router: All versions
Cisco Network Convergence System 560 Series Routers: All versions
Cisco Network Convergence System 5700 Series: All versions
Cisco Network Convergence System 57B1-5DSE-SYS: All versions
Cisco Network Convergence System 57B1-6D24-SYS: All versions
Cisco Network Convergence System 57C3-MOD: All versions
Cisco Network Convergence System 6000 Series Routers: All versions
Cisco Network Convergence System NCS-57C1-48Q6-SYS: All versions
Cisco Network Convergence System NCS-57D2-18DD-SYS: All versions
CPE2.3https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uhv6ZDeF
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.