CVE-2024-20294

Summary

CVE-2024-20294 is a recently disclosed vulnerability affecting Cisco FXOS and NX-OS Software. It permits an unauthenticated, adjacent attacker to cause a denial of service (DoS) on an affected device through improper handling of specific fields in an LLDP frame. By sending a crafted LLDP packet to an interface of the device, an attacker can trigger the LLDP service to crash and stop running, potentially resulting in a device reload. This vulnerability, specific to the Link Layer Discovery Protocol (LLDP), can only be exploited when the attacker is directly connected to an interface of the affected device, either physically or logically.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.