Summary

• Cisco released its semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication on September 25, 2024. In direct response to customer feedback, Cisco releases bundles of Cisco IOS and IOS XE Software Security Advisories on the fourth Wednesday of the month in March and September of each calendar year.

  The September 25, 2024, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication includes 11 Cisco Security Advisories that describe 11 vulnerabilities in Cisco IOS Software and Cisco IOS XE Software. Cisco has released software updates that address these vulnerabilities. 

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability	CVE-2024-20455	High	8.6
  Cisco IOS and IOS XE Software Resource Reservation Protocol Denial of Service Vulnerability	CVE-2024-20433	High	8.6
  Cisco IOS XE Software HTTP Server Telephony Services Denial of Service Vulnerability	CVE-2024-20436	High	8.6
  Cisco IOS XE Software IPv4 Fragmentation Reassembly Denial of Service Vulnerability	CVE-2024-20467	High	8.6
  Cisco IOS XE Software Protocol Independent Multicast Denial of Service Vulnerability	CVE-2024-20464	High	8.6
  Cisco IOS XE Software SD-Access Fabric Edge Node Denial of Service Vulnerability	CVE-2024-20480	High	8.6
  Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability	CVE-2024-20437	High	8.1
  Cisco IOS and IOS XE Software Web UI Cross-Site Request Forgery Vulnerability	CVE-2024-20414	Medium	6.5
  Cisco IOS Software on Cisco Industrial Ethernet Series Switches Access Control List Bypass Vulnerability	CVE-2024-20465	Medium	5.8
  Cisco IOS XE Software for Wireless Controllers CWA Pre-Authentication ACL Bypass Vulnerability	CVE-2024-20510	Medium	4.7
  Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability	CVE-2024-20434	Medium	4.3

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A