#VU87523 NULL pointer dereference in Cisco Systems, Inc products - CVE-2024-20266
Vulnerability identifier: #VU87523
Vulnerability risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID:
CWE-ID:
CWE-476
Exploitation vector: Network
Exploit availability: No
Vulnerable software:
Cisco IOS XR
Operating systems & Components /
Operating system
Cisco 8000 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8201 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8202 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8808 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8812 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco 8818 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9000 Series Aggregation Services Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9001 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9006 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9010 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9901 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9902 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9903 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9904 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9906 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9910 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9912 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 16-Slot Line Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 16-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 4-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 8-Slot Line Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Fabric Card Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Line Card Chassis (Dual)
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Line Card Chassis (Multi)
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-1 Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 4-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-3 Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X 16-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X 8-Slot Single-Shelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco CRS-X Multishelf System
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco IOS XRv 9000 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4009
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 4016
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-12Z20G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-12Z20G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-24Q8L2DD-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-24Z8Q2C-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-28Z4C-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-28Z4C-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-6Z14S-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-6Z18G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-ACC-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-FH-AGG Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540-FH-CSR-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-12Z16G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-12Z16G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z4G8Q2C-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z4G8Q2C-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-16Z8Q2C-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-4Z14G2Q-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-4Z14G2Q-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-6Z18G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-6Z18G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-8Z16G-SYS-A Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-8Z16G-SYS-D Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 540X-ACC-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS-E Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-4-SYS-E-CC Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-7-SYS Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 560-7-SYS-E Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco NCS 6008 - 8-Slot Chassis
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1002
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 1004
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 4000 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 500 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5000 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5001
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5002
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5011
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 540 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 540 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5500 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5501
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5501-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5502
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5502-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5504
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5508
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5516
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24Q6H-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-24Q6H-SS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-36H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-36H-SE
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A1-48Q6H
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-HD-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 55A2-MOD-SE-S
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 560 Router
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 560 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 5700 Series
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57B1-5DSE-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57B1-6D24-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 57C3-MOD
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System 6000 Series Routers
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System NCS-57C1-48Q6-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco Network Convergence System NCS-57D2-18DD-SYS
Hardware solutions /
Routers & switches, VoIP, GSM, etc
Cisco ASR 9922 Router
Client/Desktop applications /
Software for system administration
Cisco Carrier Routing System
Hardware solutions /
Firmware
Cisco Network Convergence System 1000 Series
Hardware solutions /
Firmware
Vendor: Cisco Systems, Inc
Description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the DHCP version 4 (DHCPv4) server feature. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
Cisco IOS XR: 7.9, 7.10 - 7.11, 24.1
Cisco 8000 Series Routers: All versions
Cisco 8201 Router: All versions
Cisco 8202 Router: All versions
Cisco 8808 Router: All versions
Cisco 8812 Router: All versions
Cisco 8818 Router: All versions
Cisco ASR 9000 Series Aggregation Services Routers: All versions
Cisco ASR 9001 Router: All versions
Cisco ASR 9006 Router: All versions
Cisco ASR 9010 Router: All versions
Cisco ASR 9901 Router: All versions
Cisco ASR 9902 Router: All versions
Cisco ASR 9903 Router: All versions
Cisco ASR 9904 Router: All versions
Cisco ASR 9906 Router: All versions
Cisco ASR 9910 Router: All versions
Cisco ASR 9912 Router: All versions
Cisco ASR 9922 Router: All versions
Cisco CRS-1 16-Slot Line Card Chassis: All versions
Cisco CRS-1 16-Slot Single-Shelf System: All versions
Cisco CRS-1 4-Slot Single-Shelf System: All versions
Cisco CRS-1 8-Slot Line Card Chassis: All versions
Cisco CRS-1 8-Slot Single-Shelf System: All versions
Cisco CRS-1 Fabric Card Chassis: All versions
Cisco CRS-1 Line Card Chassis (Dual): All versions
Cisco CRS-1 Line Card Chassis (Multi): All versions
Cisco CRS-1 Multishelf System: All versions
Cisco CRS-3 4-Slot Single-Shelf System: All versions
Cisco CRS-3 8-Slot Single-Shelf System: All versions
Cisco CRS-3 Multishelf System: All versions
Cisco CRS-X 16-Slot Single-Shelf System: All versions
Cisco CRS-X 8-Slot Single-Shelf System: All versions
Cisco CRS-X Multishelf System: All versions
Cisco Carrier Routing System: All versions
Cisco IOS XRv 9000 Router: All versions
Cisco NCS 4001: All versions
Cisco NCS 4009: All versions
Cisco NCS 4016: All versions
Cisco NCS 540-12Z20G-SYS-A Router: All versions
Cisco NCS 540-12Z20G-SYS-D Router: All versions
Cisco NCS 540-24Q8L2DD-SYS Router: All versions
Cisco NCS 540-24Z8Q2C-SYS Router: All versions
Cisco NCS 540-28Z4C-SYS-A Router: All versions
Cisco NCS 540-28Z4C-SYS-D Router: All versions
Cisco NCS 540-6Z14S-SYS-D Router: All versions
Cisco NCS 540-6Z18G-SYS-D Router: All versions
Cisco NCS 540-ACC-SYS Router: All versions
Cisco NCS 540-FH-AGG Router: All versions
Cisco NCS 540-FH-CSR-SYS Router: All versions
Cisco NCS 540X-12Z16G-SYS-A Router: All versions
Cisco NCS 540X-12Z16G-SYS-D Router: All versions
Cisco NCS 540X-16Z4G8Q2C-A Router: All versions
Cisco NCS 540X-16Z4G8Q2C-D Router: All versions
Cisco NCS 540X-16Z8Q2C-D Router: All versions
Cisco NCS 540X-4Z14G2Q-A Router: All versions
Cisco NCS 540X-4Z14G2Q-D Router: All versions
Cisco NCS 540X-6Z18G-SYS-A Router: All versions
Cisco NCS 540X-6Z18G-SYS-D Router: All versions
Cisco NCS 540X-8Z16G-SYS-A Router: All versions
Cisco NCS 540X-8Z16G-SYS-D Router: All versions
Cisco NCS 540X-ACC-SYS Router: All versions
Cisco NCS 560-4-SYS Router: All versions
Cisco NCS 560-4-SYS-E Router: All versions
Cisco NCS 560-4-SYS-E-CC Router: All versions
Cisco NCS 560-7-SYS Router: All versions
Cisco NCS 560-7-SYS-E Router: All versions
Cisco NCS 6008 - 8-Slot Chassis: All versions
Cisco Network Convergence System 1000 Series: All versions
Cisco Network Convergence System 1001: All versions
Cisco Network Convergence System 1002: All versions
Cisco Network Convergence System 1004: All versions
Cisco Network Convergence System 4000 Series: All versions
Cisco Network Convergence System 500 Series Routers: All versions
Cisco Network Convergence System 5000 Series: All versions
Cisco Network Convergence System 5001: All versions
Cisco Network Convergence System 5002: All versions
Cisco Network Convergence System 5011: All versions
Cisco Network Convergence System 540 Router: All versions
Cisco Network Convergence System 540 Series Routers: All versions
Cisco Network Convergence System 5500 Series: All versions
Cisco Network Convergence System 5501: All versions
Cisco Network Convergence System 5501-SE: All versions
Cisco Network Convergence System 5502: All versions
Cisco Network Convergence System 5502-SE: All versions
Cisco Network Convergence System 5504: All versions
Cisco Network Convergence System 5508: All versions
Cisco Network Convergence System 5516: All versions
Cisco Network Convergence System 55A1-24H: All versions
Cisco Network Convergence System 55A1-24Q6H-S: All versions
Cisco Network Convergence System 55A1-24Q6H-SS: All versions
Cisco Network Convergence System 55A1-36H: All versions
Cisco Network Convergence System 55A1-36H-SE: All versions
Cisco Network Convergence System 55A1-48Q6H: All versions
Cisco Network Convergence System 55A2-MOD-HD-S: All versions
Cisco Network Convergence System 55A2-MOD-S: All versions
Cisco Network Convergence System 55A2-MOD-SE-S: All versions
Cisco Network Convergence System 560 Router: All versions
Cisco Network Convergence System 560 Series Routers: All versions
Cisco Network Convergence System 5700 Series: All versions
Cisco Network Convergence System 57B1-5DSE-SYS: All versions
Cisco Network Convergence System 57B1-6D24-SYS: All versions
Cisco Network Convergence System 57C3-MOD: All versions
Cisco Network Convergence System 6000 Series Routers: All versions
Cisco Network Convergence System NCS-57C1-48Q6-SYS: All versions
Cisco Network Convergence System NCS-57D2-18DD-SYS: All versions
External links
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dhcp-dos-3tgPKRdm
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
