CVE-2024-20474
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-20474
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
整数下溢(超界折返)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Secure Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Secure Client是美国思科（Cisco）公司的一个用于连接虚拟专用网络的软件。 Cisco Secure Client存在安全漏洞，该漏洞源于存在整数下溢问题。攻击者利用该漏洞导致系统拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Secure Client | 4.9.00086 | - |
II. Public POCs for CVE-2024-20474
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-20474
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2024-10-23 · 52 CVEs total
| CVE-2024-20424 | 9.9 CRITICAL | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20329 | 9.9 CRITICAL | Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability |
| CVE-2024-20412 | 9.3 CRITICAL | Cisco Firepower Threat Defense 安全漏洞 |
| CVE-2024-20351 | 8.6 HIGH | Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability |
| CVE-2024-20260 | 8.6 HIGH | Cisco Adaptive Security Virtual Appliance and Secure Firewall Threat Defense Virtual SSL V |
| CVE-2024-20494 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20426 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20330 | 8.6 HIGH | Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 an |
| CVE-2024-20339 | 8.6 HIGH | Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vu |
| CVE-2024-20402 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20495 | 8.6 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20268 | 7.7 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Deni |
| CVE-2024-20408 | 7.7 HIGH | Cisco Firepower Threat Defense和Cisco Adaptive Security Appliance 安全漏洞 |
| CVE-2024-20275 | 6.8 MEDIUM | Cisco Secure Firewall Management Center Software Backup Cluster Command Injection Vulnerab |
| CVE-2024-20331 | 6.8 MEDIUM | Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication |
| CVE-2024-20471 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20379 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20374 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20482 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
| CVE-2024-20340 | 6.5 MEDIUM | Cisco Secure Firewall Management Center 安全漏洞 |
Showing top 20 of 52 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-191
- CVE-2026-7736
osrg GoBGP mrt.go parseRibEntry integer underflow - CVE-2026-33845
Gnutls: gnutls: denial of service via dtls zero-length fragm - CVE-2026-7424
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Pl - CVE-2026-7423
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS- - CVE-2026-6914
MD5 checksum creation may cause availability loss
V. Comments for CVE-2024-20474
No comments yet