CVE-2024-20294
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Summary
CVE-2024-20294 is a recently disclosed vulnerability affecting Cisco FXOS and NX-OS Software. It permits an unauthenticated, adjacent attacker to cause a denial of service (DoS) on an affected device through improper handling of specific fields in an LLDP frame. By sending a crafted LLDP packet to an interface of the device, an attacker can trigger the LLDP service to crash and stop running, potentially resulting in a device reload. This vulnerability, specific to the Link Layer Discovery Protocol (LLDP), can only be exploited when the attacker is directly connected to an interface of the affected device, either physically or logically.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions