CVE-2024-20474
Estado: AnalizadaMedia (6.5)—
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.
This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software.
Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.62%
- Percentil entre todas las CVEs puntuadas: 48
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-191
- CWE-191
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-20474",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-20474",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-10-23T20:54:04.508420Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Client",
"versions": [
{
"status": "affected",
"version": "4.9.00086"
},
{
"status": "affected",
"version": "4.9.01095"
},
{
"status": "affected",
"version": "4.9.02028"
},
{
"status": "affected",
"version": "4.9.03047"
},
{
"status": "affected",
"version": "4.9.03049"
},
{
"status": "affected",
"version": "4.9.04043"
},
{
"status": "affected",
"version": "4.9.04053"
},
{
"status": "affected",
"version": "4.9.05042"
},
{
"status": "affected",
"version": "4.9.06037"
},
{
"status": "affected",
"version": "4.10.00093"
},
{
"status": "affected",
"version": "4.10.01075"
},
{
"status": "affected",
"version": "4.10.02086"
},
{
"status": "affected",
"version": "4.10.03104"
},
{
"status": "affected",
"version": "4.10.04065"
},
{
"status": "affected",
"version": "4.10.04071"
},
{
"status": "affected",
"version": "4.10.05085"
},
{
"status": "affected",
"version": "4.10.05095"
},
{
"status": "affected",
"version": "4.10.05111"
},
{
"status": "affected",
"version": "4.10.06079"
},
{
"status": "affected",
"version": "4.10.06090"
},
{
"status": "affected",
"version": "4.10.07061"
},
{
"status": "affected",
"version": "4.10.07062"
},
{
"status": "affected",
"version": "4.10.07073"
},
{
"status": "affected",
"version": "4.10.08025"
},
{
"status": "affected",
"version": "4.10.08029"
},
{
"status": "affected",
"version": "5.0.00238"
},
{
"status": "affected",
"version": "5.0.00529"
},
{
"status": "affected",
"version": "5.0.00556"
},
{
"status": "affected",
"version": "5.0.01242"
},
{
"status": "affected",
"version": "5.0.02075"
},
{
"status": "affected",
"version": "5.0.03072"
},
{
"status": "affected",
"version": "5.0.03076"
},
{
"status": "affected",
"version": "5.0.04032"
},
{
"status": "affected",
"version": "5.0.05040"
},
{
"status": "affected",
"version": "5.1.0.136"
},
{
"status": "affected",
"version": "5.1.1.42"
},
{
"status": "affected",
"version": "5.1.2.42"
},
{
"status": "affected",
"version": "5.1.3.62"
}
]
}
]
}
],
"published": "2024-10-23T18:15:11.517",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csc-dos-XvPhM3bj",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.\r\n\r This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software.\r\n\r Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el procesamiento de la versión 2 de Internet Key Exchange (IKEv2) de Cisco Secure Client Software podría permitir que un atacante remoto no autenticado provoque una denegación de servicio (DoS) de Cisco Secure Client. Esta vulnerabilidad se debe a una condición de desbordamiento de enteros. Un atacante podría aprovechar esta vulnerabilidad enviando un paquete IKEv2 manipulado a un sistema afectado. Una explotación exitosa podría permitir al atacante provocar que Cisco Secure Client Software se bloquee, lo que provocaría una condición de DoS en el software cliente. Nota: Las versiones 4.10 y anteriores de Cisco Secure Client Software se conocían como Cisco AnyConnect Secure Mobility Client."
}
],
"lastModified": "2026-06-17T07:07:10.643",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03B6618B-2E98-480C-AF79-2A9E9BF29CB3"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2CB76BE-7DD7-40D7-A7C7-DDA7079A286F"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C87CEF61-99F2-4845-9FDE-4B6ED62637C3"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA80A4E4-061E-4578-B780-9540AE502E66"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "804366C1-F307-4DC2-9FEA-B4EB60790A32"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AD3244A-5CA8-496C-B189-BCD31B0E40C8"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAB00A32-8571-4685-B448-690F8EE373D9"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F97CC9FF-FDD3-46A1-9025-BAA83160A504"
},
{
"criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF8E83C4-9C5A-4D84-AB19-A4564BBB6625"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FDBC52F-F851-4DC4-9DED-45F8689F2A00"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6D74511-0444-473C-96F7-751C2B9A6ADC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D89BE767-38C2-4E92-83EB-09E23B48AAF8"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC77CA23-5750-4E35-AD17-4FE0B351ECFD"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDE66231-01C3-4807-AB7B-F2A3C2E2200D"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B003756D-7F3D-4FB9-B3EF-CEAA68334630"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B06F4BD8-23D2-4C32-B090-F33D50BB5805"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EE93BD0-7AAD-4921-A6F1-22F1905F8870"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "222718F2-81E9-40BD-8B2D-ECD70CC423E3"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1150AC7-8E86-471E-87DD-F4C0D0628261"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "585A3B8E-8FD1-4B01-9F82-1038BF50A0FB"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61D0138A-EE54-420B-A11B-4580DD130FBF"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D45B8E46-AE9E-44F6-B58E-5AF7A32D499B"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAB896B8-535A-494F-AA21-3DA56CD7A540"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "314BBB39-15FD-4DEB-8286-047644C4D456"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4877EEBA-CA94-4176-8442-429E9DF1E5AA"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B7B74D9-7D43-48B2-AE6F-4FE75DB1DF61"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86B5EB44-F814-49AB-BAD2-3E02E9707377"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C33CF946-24CD-471E-8448-445E629789BD"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E39EE52-4A48-430E-A7A5-29276EE51B03"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "781CEBDC-3A42-47BA-8509-E35AB6BB56C6"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADF3D714-0475-4E30-8245-159C5BA68F11"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA2D666F-5EBF-41B7-89C1-32BCF65DABEC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDDE95F2-E54E-4955-8E07-C8D97BCB2CC7"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEF7A28D-542B-46A1-B428-BA3E71A62B44"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E38148BD-1C03-43F8-83F2-3043B3442100"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C771F3C7-609D-4C66-B1A0-34BD26FFD781"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7D6AB12-BC84-4324-BB4E-AAC3701B28C2"
},
{
"criteria": "cpe:2.3:a:cisco:secure_client:5.1.3.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A560B61-73F1-42E5-9F4F-931610C6954A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}