Resource exhaustion in Cisco Systems, Inc products - CVE-2024-20344
Published: February 29, 2024
Vulnerability identifier: #VU86910
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2024-20344
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Cisco Systems, Inc
Affected software:
UCS 6400 Series Fabric Interconnects
UCS 6500 Series Fabric Interconnects
Cisco IMM Management Package
UCS 6400 Series Fabric Interconnects
UCS 6500 Series Fabric Interconnects
Cisco IMM Management Package
Detailed vulnerability description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in system resource management. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
How to mitigate CVE-2024-20344
Install updates from vendor's website.