CVE-2024-20344

A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device. This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfi-imm-syn-p6kZTDQC	Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfi-imm-syn-p6kZTDQC	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:cisco:imm_management_package:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:ucs_64108:-:::::::*
	cpe:2.3:h:cisco:ucs_6454:-:::::::*
	cpe:2.3:h:cisco:ucs_6536:-:::::::*

History

No history.

Information

Published : 2024-02-29 01:43

Updated : 2025-08-13 17:18

NVD link : CVE-2024-20344

Mitre link : CVE-2024-20344

CVE.ORG link : CVE-2024-20344

JSON object : View

Products Affected

cisco

ucs_6536
ucs_6454
ucs_64108
imm_management_package

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2024-20344", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-02-29T01:43:59.613", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfi-imm-syn-p6kZTDQC", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsfi-imm-syn-p6kZTDQC", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device.\r\n\r This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality."}, {"lang": "es", "value": "Una vulnerabilidad en la administraci\u00f3n de recursos del sistema en las interconexiones de estructura de las series Cisco UCS 6400 y 6500 que est\u00e1n en el modo administrado Intersight (IMM) podr\u00eda permitir que un atacante remoto no autenticado cause una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en la interfaz de usuario de la consola del dispositivo de un dispositivo afectado. . Esta vulnerabilidad se debe a una limitaci\u00f3n de velocidad insuficiente de las conexiones TCP a un dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando una gran cantidad de paquetes TCP a la interfaz de usuario de la consola del dispositivo. Un exploit exitoso podr\u00eda permitir que un atacante cause que el proceso de la interfaz de usuario de la consola del dispositivo se bloquee, lo que resultar\u00eda en una condici\u00f3n DoS. Es necesaria una recarga manual de la interconexi\u00f3n de fabric para restaurar la funcionalidad completa."}], "lastModified": "2025-08-13T17:18:26.847", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:imm_management_package:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA6E23FC-BD7B-4407-92B2-6D0890022B95", "versionEndExcluding": "1.0.11-1582"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC04D48B-8B2F-45E1-A445-A87E92E790B8"}, {"criteria": "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"}, {"criteria": "cpe:2.3:h:cisco:ucs_6536:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0C36A364-DBC0-44DA-9DB0-6CC8E9D074BF"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}