CVE-2024-20319

Summary

CVE-2024-20319 is a vulnerability affecting Cisco IOS XR Software. It stems from incorrect UDP forwarding programming when using SNMP with management plane protection. An unauthenticated, adjacent attacker can exploit this flaw by sending SNMP operations with broadcast as the destination address, potentially bypassing configured management plane protection policies. Successful exploitation enables the attacker to communicate with the affected device on the configured SNMP ports, although data retrieval or modification requires authentication.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.