CVE-2024-20344

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 29, 2024
CWE ID 400

Summary

CVE-2024-20344 is a newly disclosed vulnerability that affects Cisco UCS 6400 and 6500 Series Fabric Interconnects in Intersight Managed Mode (IMM). The issue stems from insufficient rate-limiting of TCP connections to the Device Console UI, making it susceptible to denial of service (DoS) attacks. An attacker can cause a crash of the Device Console UI process by flooding it with a high volume of TCP packets. Consequently, the interface becomes unresponsive, leading to a DoS condition. To restore full functionality, a manual reload of the fabric interconnect is required.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2024-20344 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions

Book your demo

Sign in

Back to Vulnerability Database