CVE-2024-20474 Integer overflow in Cisco Secure Client
An unauthenticated remote attacker can cause a denial of service in Cisco Secure Client by sending a crafted IKEv2 packet that triggers an integer underflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-20474?
CVE-2024-20474 is a medium-severity vulnerability in Cisco Anyconnect Secure Mobility Client, published on 23 Oct 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
Weakness: CWE-191
Which versions are affected by CVE-2024-20474?
It affects 2 products.
Products include Cisco Anyconnect Secure Mobility Client, Cisco Secure Client.
How do I fix CVE-2024-20474?
No fix has been published for CVE-2024-20474 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-20474 being exploited?
There is no known exploitation of CVE-2024-20474 in the wild and no public exploit code.
Other vulnerabilities in Cisco Anyconnect Secure Mobility Client
Sources
Also known as GHSA-f5rp-4vg3-xcrx.