Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-20436

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the HTTP Server feature of Cisco IOS XE Software when the Telephony Service feature is enabled could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a null pointer dereference when accessing specific URLs. An attacker could exploit this vulnerability by sending crafted HTTP traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, causing a DoS condition on the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco IOS XE Software

  • 3.9.1Saffected
  • 3.9.2Saffected
  • 3.9.0aSaffected
  • 3.10.0Saffected
  • 3.10.1Saffected
  • 3.10.2Saffected
  • 3.10.3Saffected
  • 3.10.4Saffected
  • 3.10.5Saffected
  • 3.10.6Saffected
  • 3.10.2tSaffected
  • 3.10.7Saffected
  • 3.10.8Saffected
  • 3.10.8aSaffected
  • 3.10.9Saffected
  • 3.10.10Saffected
  • 3.11.1Saffected
  • 3.11.2Saffected
  • 3.11.0Saffected
  • 3.11.3Saffected
  • 3.11.4Saffected
  • 3.12.0Saffected
  • 3.12.1Saffected
  • 3.12.2Saffected
  • 3.12.3Saffected
  • 3.12.4Saffected
  • 3.13.0Saffected
  • 3.13.1Saffected
  • 3.13.2Saffected
  • 3.13.3Saffected
  • 3.13.4Saffected
  • 3.13.5Saffected
  • 3.13.6Saffected
  • 3.13.7Saffected
  • 3.13.6aSaffected
  • 3.13.8Saffected
  • 3.13.9Saffected
  • 3.13.10Saffected
  • 3.14.0Saffected
  • 3.14.1Saffected
  • 3.14.2Saffected
  • 3.14.3Saffected
  • 3.14.4Saffected
  • 3.15.0Saffected
  • 3.15.1Saffected
  • 3.15.2Saffected
  • 3.15.1cSaffected
  • 3.15.3Saffected
  • 3.15.4Saffected
  • 3.16.0Saffected
  • 3.16.1aSaffected
  • 3.16.2Saffected
  • 3.16.0cSaffected
  • 3.16.3Saffected
  • 3.16.4aSaffected
  • 3.16.4bSaffected
  • 3.16.5Saffected
  • 3.16.4dSaffected
  • 3.16.6Saffected
  • 3.16.7Saffected
  • 3.16.6bSaffected
  • 3.16.7aSaffected
  • 3.16.7bSaffected
  • 3.16.8Saffected
  • 3.16.9Saffected
  • 3.16.10Saffected
  • 3.17.0Saffected
  • 3.17.1Saffected
  • 3.17.2Saffected
  • 3.17.3Saffected
  • 3.17.4Saffected
  • 16.2.1affected
  • 16.2.2affected
  • 16.3.1affected
  • 16.3.2affected
  • 16.3.3affected
  • 16.3.1aaffected
  • 16.3.4affected
  • 16.3.5affected
  • 16.3.6affected
  • 16.3.7affected
  • 16.3.8affected
  • 16.3.9affected
  • 16.3.10affected
  • 16.3.11affected
  • 16.4.1affected
  • 16.4.2affected
  • 16.4.3affected
  • 16.5.1affected
  • 16.5.1baffected
  • 16.5.2affected
  • 16.5.3affected
  • 3.18.2aSPaffected
  • 16.6.1affected
  • 16.6.2affected
  • 16.6.3affected
  • 16.6.4affected
  • 16.6.5affected
  • 16.6.6affected
  • 16.6.7affected
  • 16.6.8affected
  • 16.6.9affected
  • 16.6.10affected
  • 16.7.1affected
  • 16.7.2affected
  • 16.7.3affected
  • 16.8.1affected
  • 16.8.1saffected
  • 16.8.2affected
  • 16.8.3affected
  • 16.9.1affected
  • 16.9.2affected
  • 16.9.1saffected
  • 16.9.3affected
  • 16.9.4affected
  • 16.9.5affected
  • 16.9.6affected
  • 16.9.7affected
  • 16.9.8affected
  • 16.10.1affected
  • 16.10.1aaffected
  • 16.10.1baffected
  • 16.10.1saffected
  • 16.10.1eaffected
  • 16.10.2affected
  • 16.10.3affected
  • 16.11.1affected
  • 16.11.1aaffected
  • 16.11.1baffected
  • 16.11.2affected
  • 16.11.1saffected
  • 16.12.1affected
  • 16.12.1saffected
  • 16.12.1aaffected
  • 16.12.1caffected
  • 16.12.2affected
  • 16.12.3affected
  • 16.12.8affected
  • 16.12.2saffected
  • 16.12.4affected
  • 16.12.3saffected
  • 16.12.4aaffected
  • 16.12.5affected
  • 16.12.6affected
  • 16.12.7affected
  • 17.1.1affected
  • 17.1.1saffected
  • 17.1.1taffected
  • 17.1.3affected
  • 17.2.1affected
  • 17.2.1raffected
  • 17.2.1vaffected
  • 17.2.2affected
  • 17.2.3affected
  • 17.3.1affected
  • 17.3.2affected
  • 17.3.3affected
  • 17.3.1aaffected
  • 17.3.4affected
  • 17.3.5affected
  • 17.3.4aaffected
  • 17.3.6affected
  • 17.3.7affected
  • 17.3.8affected
  • 17.3.8aaffected
  • 17.4.1affected
  • 17.4.2affected
  • 17.4.1aaffected
  • 17.4.1baffected
  • 17.5.1affected
  • 17.5.1aaffected
  • 17.6.1affected
  • 17.6.2affected
  • 17.6.1aaffected
  • 17.6.3affected
  • 17.6.3aaffected
  • 17.6.4affected
  • 17.6.5affected
  • 17.6.6affected
  • 17.6.6aaffected
  • 17.6.5aaffected
  • 17.7.1affected
  • 17.7.1aaffected
  • 17.7.2affected
  • 17.10.1affected
  • 17.10.1aaffected
  • 17.10.1baffected
  • 17.8.1affected
  • 17.8.1aaffected
  • 17.9.1affected
  • 17.9.2affected
  • 17.9.1aaffected
  • 17.9.3affected
  • 17.9.2aaffected
  • 17.9.3aaffected
  • 17.9.4affected
  • 17.9.4aaffected
  • 17.11.1affected
  • 17.11.1aaffected
  • 17.12.1affected
  • 17.12.1aaffected

References