QID 317424

Date Published: 2024-03-19

QID 317424: Cisco Internetwork Operating System (IOS) XR Software Authenticated CLI Secure Copy Protocol and SFTP Denial of Service (DoS) Vulnerability (cisco-sa-iosxr-scp-dos-kb6sUUHw)

A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticated, local attacker to create or overwrite files in a system directory, which could lead to a denial of service (DoS) condition. The attacker would require valid user credentials to perform this attack.
This vulnerability is due to a lack of proper validation of SCP and SFTP CLI input parameters. An attacker could exploit this vulnerability by authenticating to the device and issuing SCP or SFTP CLI commands with specific parameters.

Affected Products
Cisco IOS XR Software releases:

QID Detection Logic (Authenticated):
The check matches Cisco IOS XR version retrieved via Unix Auth using "show version" command.

A successful exploit could allow the attacker to impact the functionality of the device, which could lead to a DoS condition. The device may need to be manually rebooted to recover.

CVSS V3 rated as High - 6.5 severity.

CVSS V2 rated as Low - 2.1 severity.

Solution

Customers are advised to refer to cisco-sa-iosxr-scp-dos-kb6sUUHw for more information.

Vendor References

cisco-sa-iosxr-scp-dos-kb6sUUHw - sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-dos-kb6sUUHw

CVEs related to QID 317424

CVE-2024-20262 |

Software Advisories

Advisory ID	Software	Component	Link
cisco-sa-iosxr-scp-dos-kb6sUUHw			sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-dos-kb6sUUHw

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].