A vulnerability in auxiliary asynchronous port (AUX) functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop responding.
This vulnerability is due to the incorrect handling of specific ingress traffic when flow control hardware is enabled on the AUX port. An attacker could exploit this vulnerability by reverse telnetting to the AUX port and sending specific data after connecting. A successful exploit could allow the attacker to cause the device to reset or stop responding, resulting in a denial of service (DoS) condition.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: cisco
Published: 2024-03-27T17:02:19.749Z
Updated: 2024-03-27T17:02:19.749Z
Reserved: 2023-11-08T15:08:07.631Z
Link: CVE-2024-20309
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-03-27T17:15:52.260
Modified: 2024-03-27T17:48:21.140
Link: CVE-2024-20309
JSON object: View
Redhat Information
No data.
CWE