CVE-2024-20344 Denial of service in Cisco Unified Computing System (Managed)
Unauthenticated remote attackers can crash the Device Console UI via TCP flooding, requiring a manual reload to restore functionality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-20344?
CVE-2024-20344 is a medium-severity denial of service vulnerability in Cisco Unified Computing System (Managed), published on 28 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device. This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality.
Weakness: CWE-400
Which versions are affected by CVE-2024-20344?
It affects 1 product.
Products include Cisco Imm Management Package.
How do I fix CVE-2024-20344?
No fix has been published for CVE-2024-20344 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-20344 being exploited?
There is no known exploitation of CVE-2024-20344 in the wild and no public exploit code.
Sources
Also known as GHSA-rhpc-fph8-3vqm.