CVE-2024-20312

Device reload via malformed IS-IS packet parsing

Published Mar 27, 2024 · Updated Aug 26, 2025

Denial of service in the IS-IS protocol of Cisco IOS and IOS XE Software allows physically proximate attackers to reload devices. The ingress IS-IS packet parser insufficiently validates crafted packets before dereferencing packet data, triggering a device reload. Exploitation requires Layer 2 adjacency, a formed IS-IS adjacency, and a device operating as a Level 1 or Level 1-2 router; Level 2-only routers are not affected.

CVSS severity7.4
High
EPSS probability0.26%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Denial of service in the IS-IS protocol of Cisco IOS and IOS XE Software allows physically proximate attackers to reload devices. The ingress IS-IS packet parser insufficiently validates crafted packets before dereferencing packet data, triggering a device reload. Exploitation requires Layer 2 adjacency, a formed IS-IS adjacency, and a device operating as a Level 1 or Level 1-2 router; Level 2-only routers are not affected.

The record

CVE
CVE-2024-20312
Published
Mar 27, 2024
Updated
Aug 26, 2025
Vendor
ClamAV
Product
Cisco IOS
Classifications
CWE-476, T1499
Attack vector
adjacent
Privileges
unauthenticated

Timeline

How it unfolded

  1. Mar 27, 2024CVE publishedPublication date reported by the CVE source.
  2. Aug 26, 2025Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=15.0(1)EX
  2. Affected versionversion=15.1(1)SY
  3. Affected versionversion=15.1(1)SY1
  4. Affected versionversion=15.1(1)SY2
  5. Affected versionversion=15.1(1)SY3
  6. Affected versionversion=15.1(1)SY4
  7. Affected versionversion=15.1(1)SY5
  8. Affected versionversion=15.1(1)SY6
  9. Affected versionversion=15.1(2)SG
  10. Affected versionversion=15.1(2)SG1
  11. Affected versionversion=15.1(2)SG2
  12. Affected versionversion=15.1(2)SG3
  13. Affected versionversion=15.1(2)SG4
  14. Affected versionversion=15.1(2)SG5
  15. Affected versionversion=15.1(2)SG6
  16. Affected versionversion=15.1(2)SG7
  17. Affected versionversion=15.1(2)SG8
  18. Affected versionversion=15.1(2)SY
  19. Affected versionversion=15.1(2)SY1
  20. Affected versionversion=15.1(2)SY10
  21. Affected versionversion=15.1(2)SY11
  22. Affected versionversion=15.1(2)SY12
  23. Affected versionversion=15.1(2)SY13
  24. Affected versionversion=15.1(2)SY14
  25. Affected versionversion=15.1(2)SY15
  26. Affected versionversion=15.1(2)SY16
  27. Affected versionversion=15.1(2)SY2
  28. Affected versionversion=15.1(2)SY3
  29. Affected versionversion=15.1(2)SY4
  30. Affected versionversion=15.1(2)SY4a
  31. Affected versionversion=15.1(2)SY5
  32. Affected versionversion=15.1(2)SY6
  33. Affected versionversion=15.1(2)SY7
  34. Affected versionversion=15.1(2)SY8
  35. Affected versionversion=15.1(2)SY9
  36. Affected versionversion=15.2(1)E
  37. Affected versionversion=15.2(1)E1
  38. Affected versionversion=15.2(1)E2
  39. Affected versionversion=15.2(1)E3
  40. Affected versionversion=15.2(1)EY
  41. Affected versionversion=15.2(1)S
  42. Affected versionversion=15.2(1)S1
  43. Affected versionversion=15.2(1)S2
  44. Affected versionversion=15.2(1)SY
  45. Affected versionversion=15.2(1)SY0a
  46. Affected versionversion=15.2(1)SY1
  47. Affected versionversion=15.2(1)SY1a
  48. Affected versionversion=15.2(1)SY2
  49. Affected versionversion=15.2(1)SY3
  50. Affected versionversion=15.2(1)SY4
  51. Affected versionversion=15.2(1)SY5
  52. Affected versionversion=15.2(1)SY6
  53. Affected versionversion=15.2(1)SY7
  54. Affected versionversion=15.2(1)SY8
  55. Affected versionversion=15.2(2a)E2
  56. Affected versionversion=15.2(2)E
  57. Affected versionversion=15.2(2)E1
  58. Affected versionversion=15.2(2)E10
  59. Affected versionversion=15.2(2)E2
  60. Affected versionversion=15.2(2)E3
  61. Affected versionversion=15.2(2)E4
  62. Affected versionversion=15.2(2)E5
  63. Affected versionversion=15.2(2)E5a
  64. Affected versionversion=15.2(2)E5b
  65. Affected versionversion=15.2(2)E6
  66. Affected versionversion=15.2(2)E7
  67. Affected versionversion=15.2(2)E7b
  68. Affected versionversion=15.2(2)E8
  69. Affected versionversion=15.2(2)E9
  70. Affected versionversion=15.2(2)EA
  71. Affected versionversion=15.2(2)EA1
  72. Affected versionversion=15.2(2)EA2
  73. Affected versionversion=15.2(2)EA3
  74. Affected versionversion=15.2(2)EB
  75. Affected versionversion=15.2(2)EB1
  76. Affected versionversion=15.2(2)EB2
  77. Affected versionversion=15.2(2)S
  78. Affected versionversion=15.2(2)S0a
  79. Affected versionversion=15.2(2)S0c
  80. Affected versionversion=15.2(2)S1
  81. Affected versionversion=15.2(2)S2
  82. Affected versionversion=15.2(2)SY
  83. Affected versionversion=15.2(2)SY1
  84. Affected versionversion=15.2(2)SY2
  85. Affected versionversion=15.2(2)SY3
  86. Affected versionversion=15.2(3a)E
  87. Affected versionversion=15.2(3)E
  88. Affected versionversion=15.2(3)E1
  89. Affected versionversion=15.2(3)E2
  90. Affected versionversion=15.2(3)E3
  91. Affected versionversion=15.2(3)E4
  92. Affected versionversion=15.2(3)E5
  93. Affected versionversion=15.2(3)EA
  94. Affected versionversion=15.2(3)GC
  95. Affected versionversion=15.2(3)GC1
  96. Affected versionversion=15.2(4)E
  97. Affected versionversion=15.2(4)E1
  98. Affected versionversion=15.2(4)E10
  99. Affected versionversion=15.2(4)E10a
  100. Affected versionversion=15.2(4)E10d
  101. Affected versionversion=15.2(4)E10e
  102. Affected versionversion=15.2(4)E2
  103. Affected versionversion=15.2(4)E3
  104. Affected versionversion=15.2(4)E4
  105. Affected versionversion=15.2(4)E5
  106. Affected versionversion=15.2(4)E5a
  107. Affected versionversion=15.2(4)E6
  108. Affected versionversion=15.2(4)E7
  109. Affected versionversion=15.2(4)E8
  110. Affected versionversion=15.2(4)E9
  111. Affected versionversion=15.2(4)EA
  112. Affected versionversion=15.2(4)EA1
  113. Affected versionversion=15.2(4)EA3
  114. Affected versionversion=15.2(4)EA4
  115. Affected versionversion=15.2(4)EA5
  116. Affected versionversion=15.2(4)EA6
  117. Affected versionversion=15.2(4)EA7
  118. Affected versionversion=15.2(4)EA8
  119. Affected versionversion=15.2(4)EA9
  120. Affected versionversion=15.2(4)EA9a
  121. Affected versionversion=15.2(4)EC1
  122. Affected versionversion=15.2(4)EC2
  123. Affected versionversion=15.2(4)GC
  124. Affected versionversion=15.2(4)GC1
  125. Affected versionversion=15.2(4)GC2
  126. Affected versionversion=15.2(4)GC3
  127. Affected versionversion=15.2(4)M
  128. Affected versionversion=15.2(4)M1
  129. Affected versionversion=15.2(4)M10
  130. Affected versionversion=15.2(4)M11
  131. Affected versionversion=15.2(4)M2
  132. Affected versionversion=15.2(4)M3
  133. Affected versionversion=15.2(4)M4
  134. Affected versionversion=15.2(4)M5
  135. Affected versionversion=15.2(4)M6
  136. Affected versionversion=15.2(4)M6a
  137. Affected versionversion=15.2(4)M7
  138. Affected versionversion=15.2(4)M8
  139. Affected versionversion=15.2(4)M9
  140. Affected versionversion=15.2(4)S
  141. Affected versionversion=15.2(4)S1
  142. Affected versionversion=15.2(4)S2
  143. Affected versionversion=15.2(4)S3
  144. Affected versionversion=15.2(4)S3a
  145. Affected versionversion=15.2(4)S4
  146. Affected versionversion=15.2(4)S4a
  147. Affected versionversion=15.2(4)S5
  148. Affected versionversion=15.2(4)S6
  149. Affected versionversion=15.2(4)S7
  150. Affected versionversion=15.2(5a)E1
  151. Affected versionversion=15.2(5)E
  152. Affected versionversion=15.2(5)E1
  153. Affected versionversion=15.2(5)E2
  154. Affected versionversion=15.2(5)E2b
  155. Affected versionversion=15.2(5)E2c
  156. Affected versionversion=15.2(5)EA
  157. Affected versionversion=15.2(6)E
  158. Affected versionversion=15.2(6)E0a
  159. Affected versionversion=15.2(6)E0c
  160. Affected versionversion=15.2(6)E1
  161. Affected versionversion=15.2(6)E2
  162. Affected versionversion=15.2(6)E2a
  163. Affected versionversion=15.2(6)E3
  164. Affected versionversion=15.2(6)EB
  165. Affected versionversion=15.2(7a)E0b
  166. Affected versionversion=15.2(7b)E0b
  167. Affected versionversion=15.2(7)E
  168. Affected versionversion=15.2(7)E0b
  169. Affected versionversion=15.2(7)E0s
  170. Affected versionversion=15.2(7)E1
  171. Affected versionversion=15.2(7)E1a
  172. Affected versionversion=15.2(7)E2
  173. Affected versionversion=15.2(7)E3
  174. Affected versionversion=15.2(7)E4
  175. Affected versionversion=15.2(7)E5
  176. Affected versionversion=15.2(7)E6
  177. Affected versionversion=15.2(7)E7
  178. Affected versionversion=15.2(7)E8
  179. Affected versionversion=15.2(7)E9
  180. Affected versionversion=15.2(8)E
  181. Affected versionversion=15.2(8)E1
  182. Affected versionversion=15.2(8)E2
  183. Affected versionversion=15.2(8)E3
  184. Affected versionversion=15.2(8)E4
  185. Affected versionversion=15.2(8)E5
  186. Affected versionversion=15.3(1)S
  187. Affected versionversion=15.3(1)S1
  188. Affected versionversion=15.3(1)S2
  189. Affected versionversion=15.3(1)SY
  190. Affected versionversion=15.3(1)SY1
  191. Affected versionversion=15.3(1)SY2
  192. Affected versionversion=15.3(1)T
  193. Affected versionversion=15.3(1)T1
  194. Affected versionversion=15.3(1)T2
  195. Affected versionversion=15.3(1)T3
  196. Affected versionversion=15.3(1)T4
  197. Affected versionversion=15.3(2)S
  198. Affected versionversion=15.3(2)S1
  199. Affected versionversion=15.3(2)S2
  200. Affected versionversion=15.3(2)T
  201. Affected versionversion=15.3(2)T1
  202. Affected versionversion=15.3(2)T2
  203. Affected versionversion=15.3(2)T3
  204. Affected versionversion=15.3(2)T4
  205. Affected versionversion=15.3(3)M
  206. Affected versionversion=15.3(3)M1
  207. Affected versionversion=15.3(3)M10
  208. Affected versionversion=15.3(3)M2
  209. Affected versionversion=15.3(3)M3
  210. Affected versionversion=15.3(3)M4
  211. Affected versionversion=15.3(3)M5
  212. Affected versionversion=15.3(3)M6
  213. Affected versionversion=15.3(3)M7
  214. Affected versionversion=15.3(3)M8
  215. Affected versionversion=15.3(3)M8a
  216. Affected versionversion=15.3(3)M9
  217. Affected versionversion=15.3(3)S
  218. Affected versionversion=15.3(3)S1
  219. Affected versionversion=15.3(3)S10
  220. Affected versionversion=15.3(3)S1a
  221. Affected versionversion=15.3(3)S2
  222. Affected versionversion=15.3(3)S3
  223. Affected versionversion=15.3(3)S4
  224. Affected versionversion=15.3(3)S5
  225. Affected versionversion=15.3(3)S6
  226. Affected versionversion=15.3(3)S7
  227. Affected versionversion=15.3(3)S8
  228. Affected versionversion=15.3(3)S8a
  229. Affected versionversion=15.3(3)S9
  230. Affected versionversion=15.4(1)CG
  231. Affected versionversion=15.4(1)CG1
  232. Affected versionversion=15.4(1)S
  233. Affected versionversion=15.4(1)S1
  234. Affected versionversion=15.4(1)S2
  235. Affected versionversion=15.4(1)S3
  236. Affected versionversion=15.4(1)S4
  237. Affected versionversion=15.4(1)SY
  238. Affected versionversion=15.4(1)SY1
  239. Affected versionversion=15.4(1)SY2
  240. Affected versionversion=15.4(1)SY3
  241. Affected versionversion=15.4(1)SY4
  242. Affected versionversion=15.4(1)T
  243. Affected versionversion=15.4(1)T1
  244. Affected versionversion=15.4(1)T2
  245. Affected versionversion=15.4(1)T3
  246. Affected versionversion=15.4(1)T4
  247. Affected versionversion=15.4(2)CG
  248. Affected versionversion=15.4(2)S
  249. Affected versionversion=15.4(2)S1
  250. Affected versionversion=15.4(2)S2
  251. Affected versionversion=15.4(2)S3
  252. Affected versionversion=15.4(2)S4
  253. Affected versionversion=15.4(2)T
  254. Affected versionversion=15.4(2)T1
  255. Affected versionversion=15.4(2)T2
  256. Affected versionversion=15.4(2)T3
  257. Affected versionversion=15.4(2)T4
  258. Affected versionversion=15.4(3)S
  259. Affected versionversion=15.4(3)S1
  260. Affected versionversion=15.4(3)S10
  261. Affected versionversion=15.4(3)S2
  262. Affected versionversion=15.4(3)S3
  263. Affected versionversion=15.4(3)S4
  264. Affected versionversion=15.4(3)S5
  265. Affected versionversion=15.4(3)S6
  266. Affected versionversion=15.4(3)S6a
  267. Affected versionversion=15.4(3)S7
  268. Affected versionversion=15.4(3)S8
  269. Affected versionversion=15.4(3)S9
  270. Affected versionversion=15.5(1)S
  271. Affected versionversion=15.5(1)S1
  272. Affected versionversion=15.5(1)S2
  273. Affected versionversion=15.5(1)S3
  274. Affected versionversion=15.5(1)S4
  275. Affected versionversion=15.5(1)SY
  276. Affected versionversion=15.5(1)SY1
  277. Affected versionversion=15.5(1)SY10
  278. Affected versionversion=15.5(1)SY11
  279. Affected versionversion=15.5(1)SY12
  280. Affected versionversion=15.5(1)SY2
  281. Affected versionversion=15.5(1)SY3
  282. Affected versionversion=15.5(1)SY4
  283. Affected versionversion=15.5(1)SY5
  284. Affected versionversion=15.5(1)SY6
  285. Affected versionversion=15.5(1)SY7
  286. Affected versionversion=15.5(1)SY8
  287. Affected versionversion=15.5(1)SY9
  288. Affected versionversion=15.5(1)T
  289. Affected versionversion=15.5(1)T1
  290. Affected versionversion=15.5(1)T2
  291. Affected versionversion=15.5(1)T3
  292. Affected versionversion=15.5(1)T4
  293. Affected versionversion=15.5(2)S
  294. Affected versionversion=15.5(2)S1
  295. Affected versionversion=15.5(2)S2
  296. Affected versionversion=15.5(2)S3
  297. Affected versionversion=15.5(2)S4
  298. Affected versionversion=15.5(2)T
  299. Affected versionversion=15.5(2)T1
  300. Affected versionversion=15.5(2)T2
  301. Affected versionversion=15.5(2)T3
  302. Affected versionversion=15.5(2)T4
  303. Affected versionversion=15.5(3)M
  304. Affected versionversion=15.5(3)M0a
  305. Affected versionversion=15.5(3)M1
  306. Affected versionversion=15.5(3)M10
  307. Affected versionversion=15.5(3)M2
  308. Affected versionversion=15.5(3)M3
  309. Affected versionversion=15.5(3)M4
  310. Affected versionversion=15.5(3)M4a
  311. Affected versionversion=15.5(3)M5
  312. Affected versionversion=15.5(3)M6
  313. Affected versionversion=15.5(3)M6a
  314. Affected versionversion=15.5(3)M7
  315. Affected versionversion=15.5(3)M8
  316. Affected versionversion=15.5(3)M9
  317. Affected versionversion=15.5(3)S
  318. Affected versionversion=15.5(3)S0a
  319. Affected versionversion=15.5(3)S1
  320. Affected versionversion=15.5(3)S10
  321. Affected versionversion=15.5(3)S1a
  322. Affected versionversion=15.5(3)S2
  323. Affected versionversion=15.5(3)S3
  324. Affected versionversion=15.5(3)S4
  325. Affected versionversion=15.5(3)S5
  326. Affected versionversion=15.5(3)S6
  327. Affected versionversion=15.5(3)S6a
  328. Affected versionversion=15.5(3)S6b
  329. Affected versionversion=15.5(3)S7
  330. Affected versionversion=15.5(3)S8
  331. Affected versionversion=15.5(3)S9
  332. Affected versionversion=15.5(3)S9a
  333. Affected versionversion=15.5(3)SN
  334. Affected versionversion=15.6(1)S
  335. Affected versionversion=15.6(1)S1
  336. Affected versionversion=15.6(1)S2
  337. Affected versionversion=15.6(1)S3
  338. Affected versionversion=15.6(1)S4
  339. Affected versionversion=15.6(1)T
  340. Affected versionversion=15.6(1)T0a
  341. Affected versionversion=15.6(1)T1
  342. Affected versionversion=15.6(1)T2
  343. Affected versionversion=15.6(1)T3
  344. Affected versionversion=15.6(2)S
  345. Affected versionversion=15.6(2)S1
  346. Affected versionversion=15.6(2)S2
  347. Affected versionversion=15.6(2)S3
  348. Affected versionversion=15.6(2)S4
  349. Affected versionversion=15.6(2)SN
  350. Affected versionversion=15.6(2)SP
  351. Affected versionversion=15.6(2)SP1
  352. Affected versionversion=15.6(2)SP10
  353. Affected versionversion=15.6(2)SP2
  354. Affected versionversion=15.6(2)SP3
  355. Affected versionversion=15.6(2)SP4
  356. Affected versionversion=15.6(2)SP5
  357. Affected versionversion=15.6(2)SP6
  358. Affected versionversion=15.6(2)SP7
  359. Affected versionversion=15.6(2)SP8
  360. Affected versionversion=15.6(2)SP9
  361. Affected versionversion=15.6(2)T
  362. Affected versionversion=15.6(2)T1
  363. Affected versionversion=15.6(2)T2
  364. Affected versionversion=15.6(2)T3
  365. Affected versionversion=15.6(3)M
  366. Affected versionversion=15.6(3)M0a
  367. Affected versionversion=15.6(3)M1
  368. Affected versionversion=15.6(3)M1b
  369. Affected versionversion=15.6(3)M2
  370. Affected versionversion=15.6(3)M3
  371. Affected versionversion=15.6(3)M3a
  372. Affected versionversion=15.6(3)M4
  373. Affected versionversion=15.6(3)M5
  374. Affected versionversion=15.6(3)M6
  375. Affected versionversion=15.6(3)M6a
  376. Affected versionversion=15.6(3)M6b
  377. Affected versionversion=15.6(3)M7
  378. Affected versionversion=15.6(3)M8
  379. Affected versionversion=15.6(3)M9
  380. Affected versionversion=15.7(3)M
  381. Affected versionversion=15.7(3)M0a
  382. Affected versionversion=15.7(3)M1
  383. Affected versionversion=15.7(3)M2
  384. Affected versionversion=15.7(3)M3
  385. Affected versionversion=15.7(3)M4
  386. Affected versionversion=15.7(3)M4a
  387. Affected versionversion=15.7(3)M4b
  388. Affected versionversion=15.7(3)M5
  389. Affected versionversion=15.7(3)M6
  390. Affected versionversion=15.7(3)M7
  391. Affected versionversion=15.7(3)M8
  392. Affected versionversion=15.7(3)M9
  393. Affected versionversion=15.8(3)M
  394. Affected versionversion=15.8(3)M0a
  395. Affected versionversion=15.8(3)M0b
  396. Affected versionversion=15.8(3)M1
  397. Affected versionversion=15.8(3)M1a
  398. Affected versionversion=15.8(3)M2
  399. Affected versionversion=15.8(3)M2a
  400. Affected versionversion=15.8(3)M3
  401. Affected versionversion=15.8(3)M3a
  402. Affected versionversion=15.8(3)M3b
  403. Affected versionversion=15.8(3)M4
  404. Affected versionversion=15.8(3)M5
  405. Affected versionversion=15.8(3)M6
  406. Affected versionversion=15.8(3)M7
  407. Affected versionversion=15.8(3)M8
  408. Affected versionversion=15.8(3)M9
  409. Affected versionversion=15.9(3)M
  410. Affected versionversion=15.9(3)M0a
  411. Affected versionversion=15.9(3)M1
  412. Affected versionversion=15.9(3)M2
  413. Affected versionversion=15.9(3)M2a
  414. Affected versionversion=15.9(3)M3
  415. Affected versionversion=15.9(3)M3a
  416. Affected versionversion=15.9(3)M3b
  417. Affected versionversion=15.9(3)M4
  418. Affected versionversion=15.9(3)M4a
  419. Affected versionversion=15.9(3)M5
  420. Affected versionversion=15.9(3)M6
  421. Affected versionversion=15.9(3)M6a
  422. Affected versionversion=15.9(3)M6b
  423. Affected versionversion=15.9(3)M7
  424. Affected versionversion=15.9(3)M7a
  425. Affected versionversion=15.9(3)M8
  426. Affected versionversion=15.9(3)M8b

What conditions does exploitation require?

Attack vectoradjacent
Required privilegesunauthenticated

What is affected?

ClamAV · Cisco IOSversion=15.0(1)EX; version=15.1(1)SY; version=15.1(1)SY1; version=15.1(1)SY2; version=15.1(1)SY3; version=15.1(1)SY4; version=15.1(1)SY5; version=15.1(1)SY6; version=15.1(2)SG; version=15.1(2)SG1; version=15.1(2)SG2; version=15.1(2)SG3; version=15.1(2)SG4; version=15.1(2)SG5; version=15.1(2)SG6; version=15.1(2)SG7; version=15.1(2)SG8; version=15.1(2)SY; version=15.1(2)SY1; version=15.1(2)SY10; version=15.1(2)SY11; version=15.1(2)SY12; version=15.1(2)SY13; version=15.1(2)SY14; version=15.1(2)SY15; version=15.1(2)SY16; version=15.1(2)SY2; version=15.1(2)SY3; version=15.1(2)SY4; version=15.1(2)SY4a; version=15.1(2)SY5; version=15.1(2)SY6; version=15.1(2)SY7; version=15.1(2)SY8; version=15.1(2)SY9; version=15.2(1)E; version=15.2(1)E1; version=15.2(1)E2; version=15.2(1)E3; version=15.2(1)EY; version=15.2(1)S; version=15.2(1)S1; version=15.2(1)S2; version=15.2(1)SY; version=15.2(1)SY0a; version=15.2(1)SY1; version=15.2(1)SY1a; version=15.2(1)SY2; version=15.2(1)SY3; version=15.2(1)SY4; version=15.2(1)SY5; version=15.2(1)SY6; version=15.2(1)SY7; version=15.2(1)SY8; version=15.2(2a)E2; version=15.2(2)E; version=15.2(2)E1; version=15.2(2)E10; version=15.2(2)E2; version=15.2(2)E3; version=15.2(2)E4; version=15.2(2)E5; version=15.2(2)E5a; version=15.2(2)E5b; version=15.2(2)E6; version=15.2(2)E7; version=15.2(2)E7b; version=15.2(2)E8; version=15.2(2)E9; version=15.2(2)EA; version=15.2(2)EA1; version=15.2(2)EA2; version=15.2(2)EA3; version=15.2(2)EB; version=15.2(2)EB1; version=15.2(2)EB2; version=15.2(2)S; version=15.2(2)S0a; version=15.2(2)S0c; version=15.2(2)S1; version=15.2(2)S2; version=15.2(2)SY; version=15.2(2)SY1; version=15.2(2)SY2; version=15.2(2)SY3; version=15.2(3a)E; version=15.2(3)E; version=15.2(3)E1; version=15.2(3)E2; version=15.2(3)E3; version=15.2(3)E4; version=15.2(3)E5; version=15.2(3)EA; version=15.2(3)GC; version=15.2(3)GC1; version=15.2(4)E; version=15.2(4)E1; version=15.2(4)E10; version=15.2(4)E10a; version=15.2(4)E10d; version=15.2(4)E10e; version=15.2(4)E2; version=15.2(4)E3; version=15.2(4)E4; version=15.2(4)E5; version=15.2(4)E5a; version=15.2(4)E6; version=15.2(4)E7; version=15.2(4)E8; version=15.2(4)E9; version=15.2(4)EA; version=15.2(4)EA1; version=15.2(4)EA3; version=15.2(4)EA4; version=15.2(4)EA5; version=15.2(4)EA6; version=15.2(4)EA7; version=15.2(4)EA8; version=15.2(4)EA9; version=15.2(4)EA9a; version=15.2(4)EC1; version=15.2(4)EC2; version=15.2(4)GC; version=15.2(4)GC1; version=15.2(4)GC2; version=15.2(4)GC3; version=15.2(4)M; version=15.2(4)M1; version=15.2(4)M10; version=15.2(4)M11; version=15.2(4)M2; version=15.2(4)M3; version=15.2(4)M4; version=15.2(4)M5; version=15.2(4)M6; version=15.2(4)M6a; version=15.2(4)M7; version=15.2(4)M8; version=15.2(4)M9; version=15.2(4)S; version=15.2(4)S1; version=15.2(4)S2; version=15.2(4)S3; version=15.2(4)S3a; version=15.2(4)S4; version=15.2(4)S4a; version=15.2(4)S5; version=15.2(4)S6; version=15.2(4)S7; version=15.2(5a)E1; version=15.2(5)E; version=15.2(5)E1; version=15.2(5)E2; version=15.2(5)E2b; version=15.2(5)E2c; version=15.2(5)EA; version=15.2(6)E; version=15.2(6)E0a; version=15.2(6)E0c; version=15.2(6)E1; version=15.2(6)E2; version=15.2(6)E2a; version=15.2(6)E3; version=15.2(6)EB; version=15.2(7a)E0b; version=15.2(7b)E0b; version=15.2(7)E; version=15.2(7)E0b; version=15.2(7)E0s; version=15.2(7)E1; version=15.2(7)E1a; version=15.2(7)E2; version=15.2(7)E3; version=15.2(7)E4; version=15.2(7)E5; version=15.2(7)E6; version=15.2(7)E7; version=15.2(7)E8; version=15.2(7)E9; version=15.2(8)E; version=15.2(8)E1; version=15.2(8)E2; version=15.2(8)E3; version=15.2(8)E4; version=15.2(8)E5; version=15.3(1)S; version=15.3(1)S1; version=15.3(1)S2; version=15.3(1)SY; version=15.3(1)SY1; version=15.3(1)SY2; version=15.3(1)T; version=15.3(1)T1; version=15.3(1)T2; version=15.3(1)T3; version=15.3(1)T4; version=15.3(2)S; version=15.3(2)S1; version=15.3(2)S2; version=15.3(2)T; version=15.3(2)T1; version=15.3(2)T2; version=15.3(2)T3; version=15.3(2)T4; version=15.3(3)M; version=15.3(3)M1; version=15.3(3)M10; version=15.3(3)M2; version=15.3(3)M3; version=15.3(3)M4; version=15.3(3)M5; version=15.3(3)M6; version=15.3(3)M7; version=15.3(3)M8; version=15.3(3)M8a; version=15.3(3)M9; version=15.3(3)S; version=15.3(3)S1; version=15.3(3)S10; version=15.3(3)S1a; version=15.3(3)S2; version=15.3(3)S3; version=15.3(3)S4; version=15.3(3)S5; version=15.3(3)S6; version=15.3(3)S7; version=15.3(3)S8; version=15.3(3)S8a; version=15.3(3)S9; version=15.4(1)CG; version=15.4(1)CG1; version=15.4(1)S; version=15.4(1)S1; version=15.4(1)S2; version=15.4(1)S3; version=15.4(1)S4; version=15.4(1)SY; version=15.4(1)SY1; version=15.4(1)SY2; version=15.4(1)SY3; version=15.4(1)SY4; version=15.4(1)T; version=15.4(1)T1; version=15.4(1)T2; version=15.4(1)T3; version=15.4(1)T4; version=15.4(2)CG; version=15.4(2)S; version=15.4(2)S1; version=15.4(2)S2; version=15.4(2)S3; version=15.4(2)S4; version=15.4(2)T; version=15.4(2)T1; version=15.4(2)T2; version=15.4(2)T3; version=15.4(2)T4; version=15.4(3)S; version=15.4(3)S1; version=15.4(3)S10; version=15.4(3)S2; version=15.4(3)S3; version=15.4(3)S4; version=15.4(3)S5; version=15.4(3)S6; version=15.4(3)S6a; version=15.4(3)S7; version=15.4(3)S8; version=15.4(3)S9; version=15.5(1)S; version=15.5(1)S1; version=15.5(1)S2; version=15.5(1)S3; version=15.5(1)S4; version=15.5(1)SY; version=15.5(1)SY1; version=15.5(1)SY10; version=15.5(1)SY11; version=15.5(1)SY12; version=15.5(1)SY2; version=15.5(1)SY3; version=15.5(1)SY4; version=15.5(1)SY5; version=15.5(1)SY6; version=15.5(1)SY7; version=15.5(1)SY8; version=15.5(1)SY9; version=15.5(1)T; version=15.5(1)T1; version=15.5(1)T2; version=15.5(1)T3; version=15.5(1)T4; version=15.5(2)S; version=15.5(2)S1; version=15.5(2)S2; version=15.5(2)S3; version=15.5(2)S4; version=15.5(2)T; version=15.5(2)T1; version=15.5(2)T2; version=15.5(2)T3; version=15.5(2)T4; version=15.5(3)M; version=15.5(3)M0a; version=15.5(3)M1; version=15.5(3)M10; version=15.5(3)M2; version=15.5(3)M3; version=15.5(3)M4; version=15.5(3)M4a; version=15.5(3)M5; version=15.5(3)M6; version=15.5(3)M6a; version=15.5(3)M7; version=15.5(3)M8; version=15.5(3)M9; version=15.5(3)S; version=15.5(3)S0a; version=15.5(3)S1; version=15.5(3)S10; version=15.5(3)S1a; version=15.5(3)S2; version=15.5(3)S3; version=15.5(3)S4; version=15.5(3)S5; version=15.5(3)S6; version=15.5(3)S6a; version=15.5(3)S6b; version=15.5(3)S7; version=15.5(3)S8; version=15.5(3)S9; version=15.5(3)S9a; version=15.5(3)SN; version=15.6(1)S; version=15.6(1)S1; version=15.6(1)S2; version=15.6(1)S3; version=15.6(1)S4; version=15.6(1)T; version=15.6(1)T0a; version=15.6(1)T1; version=15.6(1)T2; version=15.6(1)T3; version=15.6(2)S; version=15.6(2)S1; version=15.6(2)S2; version=15.6(2)S3; version=15.6(2)S4; version=15.6(2)SN; version=15.6(2)SP; version=15.6(2)SP1; version=15.6(2)SP10; version=15.6(2)SP2; version=15.6(2)SP3; version=15.6(2)SP4; version=15.6(2)SP5; version=15.6(2)SP6; version=15.6(2)SP7; version=15.6(2)SP8; version=15.6(2)SP9; version=15.6(2)T; version=15.6(2)T1; version=15.6(2)T2; version=15.6(2)T3; version=15.6(3)M; version=15.6(3)M0a; version=15.6(3)M1; version=15.6(3)M1b; version=15.6(3)M2; version=15.6(3)M3; version=15.6(3)M3a; version=15.6(3)M4; version=15.6(3)M5; version=15.6(3)M6; version=15.6(3)M6a; version=15.6(3)M6b; version=15.6(3)M7; version=15.6(3)M8; version=15.6(3)M9; version=15.7(3)M; version=15.7(3)M0a; version=15.7(3)M1; version=15.7(3)M2; version=15.7(3)M3; version=15.7(3)M4; version=15.7(3)M4a; version=15.7(3)M4b; version=15.7(3)M5; version=15.7(3)M6; version=15.7(3)M7; version=15.7(3)M8; version=15.7(3)M9; version=15.8(3)M; version=15.8(3)M0a; version=15.8(3)M0b; version=15.8(3)M1; version=15.8(3)M1a; version=15.8(3)M2; version=15.8(3)M2a; version=15.8(3)M3; version=15.8(3)M3a; version=15.8(3)M3b; version=15.8(3)M4; version=15.8(3)M5; version=15.8(3)M6; version=15.8(3)M7; version=15.8(3)M8; version=15.8(3)M9; version=15.9(3)M; version=15.9(3)M0a; version=15.9(3)M1; version=15.9(3)M2; version=15.9(3)M2a; version=15.9(3)M3; version=15.9(3)M3a; version=15.9(3)M3b; version=15.9(3)M4; version=15.9(3)M4a; version=15.9(3)M5; version=15.9(3)M6; version=15.9(3)M6a; version=15.9(3)M6b; version=15.9(3)M7; version=15.9(3)M7a; version=15.9(3)M8; version=15.9(3)M8b
ClamAV · Cisco IOS XE Softwareversion=16.10.1; version=16.10.1a; version=16.10.1b; version=16.10.1c; version=16.10.1d; version=16.10.1e; version=16.10.1f; version=16.10.1g; version=16.10.1s; version=16.10.2; version=16.10.3; version=16.1.1; version=16.11.1; version=16.11.1a; version=16.11.1b; version=16.11.1s; version=16.11.2; version=16.1.2; version=16.12.1; version=16.12.10; version=16.12.10a; version=16.12.1a; version=16.12.1c; version=16.12.1s; version=16.12.1t; version=16.12.1w; version=16.12.1x; version=16.12.1y; version=16.12.1z1; version=16.12.1z2; version=16.12.2; version=16.12.2a; version=16.12.2s; version=16.12.3; version=16.12.3a; version=16.12.3s; version=16.12.4; version=16.12.4a; version=16.12.5; version=16.12.5a; version=16.12.5b; version=16.12.6; version=16.12.6a; version=16.12.7; version=16.12.8; version=16.12.9; version=16.1.3; version=16.2.1; version=16.2.2; version=16.3.1; version=16.3.10; version=16.3.11; version=16.3.1a; version=16.3.2; version=16.3.3; version=16.3.4; version=16.3.5; version=16.3.5b; version=16.3.6; version=16.3.7; version=16.3.8; version=16.3.9; version=16.4.1; version=16.4.2; version=16.4.3; version=16.5.1; version=16.5.1a; version=16.5.1b; version=16.5.2; version=16.5.3; version=16.6.1; version=16.6.10; version=16.6.2; version=16.6.3; version=16.6.4; version=16.6.4a; version=16.6.5; version=16.6.5a; version=16.6.6; version=16.6.7; version=16.6.8; version=16.6.9; version=16.7.1; version=16.7.1a; version=16.7.1b; version=16.7.2; version=16.7.3; version=16.7.4; version=16.8.1; version=16.8.1a; version=16.8.1b; version=16.8.1c; version=16.8.1d; version=16.8.1e; version=16.8.1s; version=16.8.2; version=16.8.3; version=16.9.1; version=16.9.1a; version=16.9.1b; version=16.9.1s; version=16.9.2; version=16.9.3; version=16.9.3a; version=16.9.4; version=16.9.5; version=16.9.5f; version=16.9.6; version=16.9.7; version=16.9.8; version=17.10.1; version=17.10.1a; version=17.10.1b; version=17.1.1; version=17.11.1; version=17.11.1a; version=17.11.99SW; version=17.1.1a; version=17.1.1s; version=17.1.1t; version=17.1.3; version=17.2.1; version=17.2.1a; version=17.2.1r; version=17.2.1v; version=17.2.2; version=17.2.3; version=17.3.1; version=17.3.1a; version=17.3.1w; version=17.3.1x; version=17.3.1z; version=17.3.2; version=17.3.2a; version=17.3.3; version=17.3.4; version=17.3.4a; version=17.3.4b; version=17.3.4c; version=17.3.5; version=17.3.5a; version=17.3.5b; version=17.3.6; version=17.3.7; version=17.3.8; version=17.3.8a; version=17.4.1; version=17.4.1a; version=17.4.1b; version=17.4.2; version=17.4.2a; version=17.5.1; version=17.5.1a; version=17.6.1; version=17.6.1a; version=17.6.1w; version=17.6.1x; version=17.6.1y; version=17.6.1z; version=17.6.1z1; version=17.6.2; version=17.6.3; version=17.6.3a; version=17.6.4; version=17.6.5; version=17.6.5a; version=17.7.1; version=17.7.1a; version=17.7.1b; version=17.7.2; version=17.8.1; version=17.8.1a; version=17.9.1; version=17.9.1a; version=17.9.1w; version=17.9.1x; version=17.9.1x1; version=17.9.1y; version=17.9.1y1; version=17.9.2; version=17.9.2a; version=17.9.3; version=17.9.3a; version=3.10.0cE; version=3.10.0E; version=3.10.0S; version=3.10.10S; version=3.10.1E; version=3.10.1S; version=3.10.1xbS; version=3.10.2E; version=3.10.2S; version=3.10.2tS; version=3.10.3E; version=3.10.3S; version=3.10.4S; version=3.10.5S; version=3.10.6S; version=3.10.7S; version=3.10.8aS; version=3.10.8S; version=3.10.9S; version=3.11.0E; version=3.11.0S; version=3.11.1aE; version=3.11.1E; version=3.11.1S; version=3.11.2E; version=3.11.2S; version=3.11.3aE; version=3.11.3E; version=3.11.3S; version=3.11.4E; version=3.11.4S; version=3.11.5E; version=3.11.6E; version=3.11.7E; version=3.11.8E; version=3.11.9E; version=3.12.0aS; version=3.12.0S; version=3.12.1S; version=3.12.2S; version=3.12.3S; version=3.12.4S; version=3.13.0aS; version=3.13.0S; version=3.13.10S; version=3.13.1S; version=3.13.2aS; version=3.13.2S; version=3.13.3S; version=3.13.4S; version=3.13.5aS; version=3.13.5S; version=3.13.6aS; version=3.13.6S; version=3.13.7aS; version=3.13.7S; version=3.13.8S; version=3.13.9S; version=3.14.0S; version=3.14.1S; version=3.14.2S; version=3.14.3S; version=3.14.4S; version=3.15.0S; version=3.15.1cS; version=3.15.1S; version=3.15.2S; version=3.15.3S; version=3.15.4S; version=3.16.0cS; version=3.16.0S; version=3.16.10S; version=3.16.1aS; version=3.16.1S; version=3.16.2aS; version=3.16.2bS; version=3.16.2S; version=3.16.3aS; version=3.16.3S; version=3.16.4aS; version=3.16.4bS; version=3.16.4dS; version=3.16.4S; version=3.16.5S; version=3.16.6bS; version=3.16.6S; version=3.16.7aS; version=3.16.7bS; version=3.16.7S; version=3.16.8S; version=3.16.9S; version=3.17.0S; version=3.17.1aS; version=3.17.1S; version=3.17.2S; version=3.17.3S; version=3.17.4S; version=3.18.0aS; version=3.18.0S; version=3.18.0SP; version=3.18.1aSP; version=3.18.1bSP; version=3.18.1cSP; version=3.18.1S; version=3.18.1SP; version=3.18.2aSP; version=3.18.2S; version=3.18.2SP; version=3.18.3aSP; version=3.18.3bSP; version=3.18.3S; version=3.18.3SP; version=3.18.4S; version=3.18.4SP; version=3.18.5SP; version=3.18.6SP; version=3.18.7SP; version=3.18.8aSP; version=3.18.9SP; version=3.2.0SE; version=3.2.1SE; version=3.2.2SE; version=3.2.3SE; version=3.3.0SE; version=3.3.0XO; version=3.3.1SE; version=3.3.1XO; version=3.3.2SE; version=3.3.2XO; version=3.3.3SE; version=3.3.4SE; version=3.3.5SE; version=3.4.0SG; version=3.4.1SG; version=3.4.2SG; version=3.4.3SG; version=3.4.4SG; version=3.4.5SG; version=3.4.6SG; version=3.4.7SG; version=3.4.8SG; version=3.5.0E; version=3.5.1E; version=3.5.2E; version=3.5.3E; version=3.6.0E; version=3.6.10E; version=3.6.1E; version=3.6.2aE; version=3.6.2E; version=3.6.3E; version=3.6.4E; version=3.6.5aE; version=3.6.5bE; version=3.6.5E; version=3.6.6E; version=3.6.7bE; version=3.6.7E; version=3.6.8E; version=3.6.9E; version=3.7.0bS; version=3.7.0E; version=3.7.0S; version=3.7.1aS; version=3.7.1E; version=3.7.1S; version=3.7.2E; version=3.7.2S; version=3.7.2tS; version=3.7.3E; version=3.7.3S; version=3.7.4aS; version=3.7.4E; version=3.7.4S; version=3.7.5E; version=3.7.5S; version=3.7.6S; version=3.7.7S; version=3.8.0E; version=3.8.0S; version=3.8.10E; version=3.8.10eE; version=3.8.1E; version=3.8.1S; version=3.8.2E; version=3.8.2S; version=3.8.3E; version=3.8.4E; version=3.8.5aE; version=3.8.5E; version=3.8.6E; version=3.8.7E; version=3.8.8E; version=3.8.9E; version=3.9.0aS; version=3.9.0E; version=3.9.0S; version=3.9.1aS; version=3.9.1E; version=3.9.1S; version=3.9.2E; version=3.9.2S

Published CVSS scores

7.4Cisco Systems, Inc.CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectoradjacent
Privilegesunauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-476NULL Pointer Dereference
T1499Endpoint Denial of Service

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo