#VU87514 Improper access control in Cisco Systems, Inc products - CVE-2024-20319
Vulnerability identifier: #VU87514
Vulnerability risk: Low
CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-284
Exploitation vector: Local network
Exploit availability: No
Vulnerable software:
Cisco IOS XR
Operating systems & Components /
Operating system
Cisco 8000 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8201 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8202 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8808 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8812 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8818 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9000 Series Aggregation Services Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9001 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9006 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9010 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9901 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9902 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9903 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9904 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9906 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9910 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9912 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 16-Slot Line Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 16-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 4-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 8-Slot Line Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Fabric Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Line Card Chassis (Dual)
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Line Card Chassis (Multi)
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 4-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X 16-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco IOS XRv 9000 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4009
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4016
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-12Z20G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-12Z20G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-24Q8L2DD-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-24Z8Q2C-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-28Z4C-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-28Z4C-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-6Z14S-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-6Z18G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-ACC-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-FH-AGG Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-FH-CSR-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-12Z16G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-12Z16G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z4G8Q2C-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z4G8Q2C-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z8Q2C-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-4Z14G2Q-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-4Z14G2Q-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-6Z18G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-6Z18G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-8Z16G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-8Z16G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-ACC-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS-E Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS-E-CC Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-7-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-7-SYS-E Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 6008 - 8-Slot Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1002
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1004
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1010
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 4000 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 500 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5000 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5002
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5011
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 540 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 540 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5500 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5501
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5501-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5502
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5502-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5504
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5508
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5516
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24Q6H-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24Q6H-SS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-36H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-36H-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-48Q6H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-HD-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-SE-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 560 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 560 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5700 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57B1-5DSE-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57B1-6D24-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57C3-MOD
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 6000 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System NCS-57C1-48Q6-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System NCS-57D2-18DD-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9922 Router
Client/Desktop applications /
Software for system administration
Cisco Carrier Routing System
Hardware solutions /
Firmware
Cisco Network Convergence System 1000 Series
Hardware solutions /
Firmware
Vendor: Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the UDP forwarding code. A remote attacker on the local network can bypass implemented security restrictions and communicate to the device on the configured SNMP ports.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
Cisco IOS XR: 7.11, 24.1
Cisco 8000 Series Routers: All versions
Cisco 8201 Router: All versions
Cisco 8202 Router: All versions
Cisco 8808 Router: All versions
Cisco 8812 Router: All versions
Cisco 8818 Router: All versions
Cisco ASR 9000 Series Aggregation Services Routers: All versions
Cisco ASR 9001 Router: All versions
Cisco ASR 9006 Router: All versions
Cisco ASR 9010 Router: All versions
Cisco ASR 9901 Router: All versions
Cisco ASR 9902 Router: All versions
Cisco ASR 9903 Router: All versions
Cisco ASR 9904 Router: All versions
Cisco ASR 9906 Router: All versions
Cisco ASR 9910 Router: All versions
Cisco ASR 9912 Router: All versions
Cisco ASR 9922 Router: All versions
Cisco CRS-1 16-Slot Line Card Chassis: All versions
Cisco CRS-1 16-Slot Single-Shelf System: All versions
Cisco CRS-1 4-Slot Single-Shelf System: All versions
Cisco CRS-1 8-Slot Line Card Chassis: All versions
Cisco CRS-1 8-Slot Single-Shelf System: All versions
Cisco CRS-1 Fabric Card Chassis: All versions
Cisco CRS-1 Line Card Chassis (Dual): All versions
Cisco CRS-1 Line Card Chassis (Multi): All versions
Cisco CRS-1 Multishelf System: All versions
Cisco CRS-3 4-Slot Single-Shelf System: All versions
Cisco CRS-3 8-Slot Single-Shelf System: All versions
Cisco CRS-3 Multishelf System: All versions
Cisco CRS-X 16-Slot Single-Shelf System: All versions
Cisco CRS-X 8-Slot Single-Shelf System: All versions
Cisco CRS-X Multishelf System: All versions
Cisco Carrier Routing System: All versions
Cisco IOS XRv 9000 Router: All versions
Cisco NCS 4001: All versions
Cisco NCS 4009: All versions
Cisco NCS 4016: All versions
Cisco NCS 540-12Z20G-SYS-A Router: All versions
Cisco NCS 540-12Z20G-SYS-D Router: All versions
Cisco NCS 540-24Q8L2DD-SYS Router: All versions
Cisco NCS 540-24Z8Q2C-SYS Router: All versions
Cisco NCS 540-28Z4C-SYS-A Router: All versions
Cisco NCS 540-28Z4C-SYS-D Router: All versions
Cisco NCS 540-6Z14S-SYS-D Router: All versions
Cisco NCS 540-6Z18G-SYS-D Router: All versions
Cisco NCS 540-ACC-SYS Router: All versions
Cisco NCS 540-FH-AGG Router: All versions
Cisco NCS 540-FH-CSR-SYS Router: All versions
Cisco NCS 540X-12Z16G-SYS-A Router: All versions
Cisco NCS 540X-12Z16G-SYS-D Router: All versions
Cisco NCS 540X-16Z4G8Q2C-A Router: All versions
Cisco NCS 540X-16Z4G8Q2C-D Router: All versions
Cisco NCS 540X-16Z8Q2C-D Router: All versions
Cisco NCS 540X-4Z14G2Q-A Router: All versions
Cisco NCS 540X-4Z14G2Q-D Router: All versions
Cisco NCS 540X-6Z18G-SYS-A Router: All versions
Cisco NCS 540X-6Z18G-SYS-D Router: All versions
Cisco NCS 540X-8Z16G-SYS-A Router: All versions
Cisco NCS 540X-8Z16G-SYS-D Router: All versions
Cisco NCS 540X-ACC-SYS Router: All versions
Cisco NCS 560-4-SYS Router: All versions
Cisco NCS 560-4-SYS-E Router: All versions
Cisco NCS 560-4-SYS-E-CC Router: All versions
Cisco NCS 560-7-SYS Router: All versions
Cisco NCS 560-7-SYS-E Router: All versions
Cisco NCS 6008 - 8-Slot Chassis: All versions
Cisco Network Convergence System 1000 Series: All versions
Cisco Network Convergence System 1001: All versions
Cisco Network Convergence System 1002: All versions
Cisco Network Convergence System 1004: All versions
Cisco Network Convergence System 1010: All versions
Cisco Network Convergence System 4000 Series: All versions
Cisco Network Convergence System 500 Series Routers: All versions
Cisco Network Convergence System 5000 Series: All versions
Cisco Network Convergence System 5001: All versions
Cisco Network Convergence System 5002: All versions
Cisco Network Convergence System 5011: All versions
Cisco Network Convergence System 540 Router: All versions
Cisco Network Convergence System 540 Series Routers: All versions
Cisco Network Convergence System 5500 Series: All versions
Cisco Network Convergence System 5501: All versions
Cisco Network Convergence System 5501-SE: All versions
Cisco Network Convergence System 5502: All versions
Cisco Network Convergence System 5502-SE: All versions
Cisco Network Convergence System 5504: All versions
Cisco Network Convergence System 5508: All versions
Cisco Network Convergence System 5516: All versions
Cisco Network Convergence System 55A1-24H: All versions
Cisco Network Convergence System 55A1-24Q6H-S: All versions
Cisco Network Convergence System 55A1-24Q6H-SS: All versions
Cisco Network Convergence System 55A1-36H: All versions
Cisco Network Convergence System 55A1-36H-SE: All versions
Cisco Network Convergence System 55A1-48Q6H: All versions
Cisco Network Convergence System 55A2-MOD-HD-S: All versions
Cisco Network Convergence System 55A2-MOD-S: All versions
Cisco Network Convergence System 55A2-MOD-SE-S: All versions
Cisco Network Convergence System 560 Router: All versions
Cisco Network Convergence System 560 Series Routers: All versions
Cisco Network Convergence System 5700 Series: All versions
Cisco Network Convergence System 57B1-5DSE-SYS: All versions
Cisco Network Convergence System 57B1-6D24-SYS: All versions
Cisco Network Convergence System 57C3-MOD: All versions
Cisco Network Convergence System 6000 Series Routers: All versions
Cisco Network Convergence System NCS-57C1-48Q6-SYS: All versions
Cisco Network Convergence System NCS-57D2-18DD-SYS: All versions
External links
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uhv6ZDeF
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
