CVE-2024-20344
A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause
Description
A vulnerability in system resource management in Cisco UCS 6400 and 6500 Series Fabric Interconnects that are in Intersight Managed Mode (IMM) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the Device Console UI of an affected device. This vulnerability is due to insufficient rate-limiting of TCP connections to an affected device. An attacker could exploit this vulnerability by sending a high number of TCP packets to the Device Console UI. A successful exploit could allow an attacker to cause the Device Console UI process to crash, resulting in a DoS condition. A manual reload of the fabric interconnect is needed to restore complete functionality.
Weakness: CWE-400
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Unified Computing System (UCS) | Other Products | cna-assigner |
Vendor-reported products (3)
- Cisco · Cisco Unified Computing System (Managed)
- cisco · ucs_6454
- cisco · ucs_6536
Vendor advisory
cisco-sa-ucsfi-imm-syn-p6kZTDQC
Cisco UCS 6400 and 6500 Series Fabric Interconnects Intersight Managed Mode Denial of Service Vulnerability
Cisco’s rating: Medium (advisory CVSS 5.3) · Published Feb 28, 2024
Bug ID: CSCwb71517
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from