Cisco ECE CVE-2024-20484 Denial of Service Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco Enterprise Chat and Email Denial of Service Vulnerability - Vulnerability ID: cisco-sa-ece-dos-Oqb9uFEv - CVE Number: CVE-2024-20484 - CWE Number: CWE-20 - Severity: High - Release Date: November 6, 2024 - Version: 1.0 - Workaround: No workaround available - CVSS Score: 7.5 2. Vulnerability Impact: - Affected Product: Cisco ECE (if running EAAS) - Scope of Impact: Limited to Cisco ECE running EAAS on affected devices. 3. Vulnerability Description: - Due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic, an unauthenticated remote attacker can exploit this vulnerability to cause a denial of service (DoS) on affected devices. 4. Remediation: - Cisco has released software updates to address this vulnerability. - No workaround is available. 5. Affected Products: - Cisco ECE (if running EAAS) 6. Confirmation of Affected Products: - Only products listed in the affected products list are known to be impacted by this vulnerability. 7. Workaround: - No workaround available. 8. Fixed Software: - Cisco has released free software updates to resolve this vulnerability. - Customers should obtain the security patch through regular software update channels. 9. Fixed Versions for Affected Products: - Earlier versions (prior to 12.5) require migration to fixed versions. - Version 12.5(1)ES9 - Version 12.6(1)ES9 ET3 10. Legal Disclaimer: - This document is provided "AS IS" without any warranty or guarantee, including but not limited to implied warranties of merchantability or fitness for a particular purpose. - The risk of using this document or any materials linked to it is solely at the user's own discretion. - Cisco reserves the right to modify or update this document at any time. This information helps users understand the vulnerability details, affected products, remediation steps, and how to obtain updates.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco ECE CVE-2024-20484 Denial of Service Vulnerability Advisory