CVE-2024-20311highCWE-674

CVE-2024-20311: high-severity vulnerability in Cisco IOS

Published · Updated

Follow this CVE+ Monitor Cisco IOS XE+ Monitor IOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.8%
A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit this vulnerability by sending a crafted LISP packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Note: This vulnerability could be exploited over either IPv4 or IPv6 transport.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Affected products
Cisco · Cisco IOS XE SoftwareCisco · IOS
Related CVEs — Cisco IOS

In the same product, most dangerous first.

CVE-2023-20198CRITICALCVE-2023-20198EPSS 99.6%KEVCVE-2023-20273HIGHCVE-2023-20273EPSS 92.9%KEVCVE-2017-6736HIGHCVE-2017-6736EPSS 70.4%KEVCVE-2017-6737HIGHCVE-2017-6737EPSS 45.0%KEVCVE-2025-20352HIGHCVE-2025-20352EPSS 40.6%KEVCVE-2017-6742HIGHCVE-2017-6742EPSS 21.3%KEV