CVE-2024-20414
25.09.2024, 17:15
A vulnerability in the web UI feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system through the web UI. This vulnerability is due to incorrectly accepting configuration changes through the HTTP GET method. An attacker could exploit this vulnerability by persuading a currently authenticated administrator to follow a crafted link. A successful exploit could allow the attacker to change the configuration of the affected device.
Vendor | Product | Version |
---|---|---|
cisco | ios_xe | 3.2.0se:se |
cisco | ios_xe | 3.2.0sg:sg |
cisco | ios_xe | 3.2.1se:se |
cisco | ios_xe | 3.2.1sg:sg |
cisco | ios_xe | 3.2.2se:se |
cisco | ios_xe | 3.2.2sg:sg |
cisco | ios_xe | 3.2.3se:se |
cisco | ios_xe | 3.2.3sg:sg |
cisco | ios_xe | 3.2.4sg:sg |
cisco | ios_xe | 3.2.5sg:sg |
cisco | ios_xe | 3.2.6sg:sg |
cisco | ios_xe | 3.2.7sg:sg |
cisco | ios_xe | 3.2.8sg:sg |
cisco | ios_xe | 3.2.9sg:sg |
cisco | ios_xe | 3.2.10sg:sg |
cisco | ios_xe | 3.2.11sg:sg |
cisco | ios_xe | 3.3.0se:se |
cisco | ios_xe | 3.3.0sg:sg |
cisco | ios_xe | 3.3.0sq:sq |
cisco | ios_xe | 3.3.1se:se |
cisco | ios_xe | 3.3.1sg:sg |
cisco | ios_xe | 3.3.1sq:sq |
cisco | ios_xe | 3.3.2se:se |
cisco | ios_xe | 3.3.2sg:sg |
cisco | ios_xe | 3.3.3se:se |
cisco | ios_xe | 3.3.4se:se |
cisco | ios_xe | 3.3.5se:se |
cisco | ios_xe | 3.4.0sg:sg |
cisco | ios_xe | 3.4.0sq:sq |
cisco | ios_xe | 3.4.1sg:sg |
cisco | ios_xe | 3.4.1sq:sq |
cisco | ios_xe | 3.4.2sg:sg |
cisco | ios_xe | 3.4.3sg:sg |
cisco | ios_xe | 3.4.4sg:sg |
cisco | ios_xe | 3.4.5sg:sg |
cisco | ios_xe | 3.4.6sg:sg |
cisco | ios_xe | 3.4.7sg:sg |
cisco | ios_xe | 3.4.8sg:sg |
cisco | ios_xe | 3.5.0e:e |
cisco | ios_xe | 3.5.0sq:sq |
cisco | ios_xe | 3.5.1e:e |
cisco | ios_xe | 3.5.1sq:sq |
cisco | ios_xe | 3.5.2e:e |
cisco | ios_xe | 3.5.2sq:sq |
cisco | ios_xe | 3.5.3e:e |
cisco | ios_xe | 3.5.3sq:sq |
cisco | ios_xe | 3.5.4sq:sq |
cisco | ios_xe | 3.5.5sq:sq |
cisco | ios_xe | 3.5.6sq:sq |
cisco | ios_xe | 3.5.7sq:sq |
cisco | ios_xe | 3.5.8sq:sq |
cisco | ios_xe | 3.6.0e:e |
cisco | ios_xe | 3.6.1e:e |
cisco | ios_xe | 3.6.2ae:ae |
cisco | ios_xe | 3.6.2e:e |
cisco | ios_xe | 3.6.3e:e |
cisco | ios_xe | 3.6.4e:e |
cisco | ios_xe | 3.6.5ae:ae |
cisco | ios_xe | 3.6.5be:be |
cisco | ios_xe | 3.6.5e:e |
cisco | ios_xe | 3.6.6e:e |
cisco | ios_xe | 3.6.7be:be |
cisco | ios_xe | 3.6.7e:e |
cisco | ios_xe | 3.6.8e:e |
cisco | ios_xe | 3.6.9e:e |
cisco | ios_xe | 3.6.10e:e |
cisco | ios_xe | 3.7.0bs:bs |
cisco | ios_xe | 3.7.0e:e |
cisco | ios_xe | 3.7.0s:s |
cisco | ios_xe | 3.7.1as:as |
cisco | ios_xe | 3.7.1e:e |
cisco | ios_xe | 3.7.1s:s |
cisco | ios_xe | 3.7.2e:e |
cisco | ios_xe | 3.7.2s:s |
cisco | ios_xe | 3.7.2ts:ts |
cisco | ios_xe | 3.7.3e:e |
cisco | ios_xe | 3.7.3s:s |
cisco | ios_xe | 3.7.4as:as |
cisco | ios_xe | 3.7.4e:e |
cisco | ios_xe | 3.7.4s:s |
cisco | ios_xe | 3.7.5e:e |
cisco | ios_xe | 3.7.5s:s |
cisco | ios_xe | 3.7.6s:s |
cisco | ios_xe | 3.7.7s:s |
cisco | ios_xe | 3.8.0e:e |
cisco | ios_xe | 3.8.0s:s |
cisco | ios_xe | 3.8.1e:e |
cisco | ios_xe | 3.8.1s:s |
cisco | ios_xe | 3.8.2e:e |
cisco | ios_xe | 3.8.2s:s |
cisco | ios_xe | 3.8.3e:e |
cisco | ios_xe | 3.8.4e:e |
cisco | ios_xe | 3.8.5ae:ae |
cisco | ios_xe | 3.8.5e:e |
cisco | ios_xe | 3.8.6e:e |
cisco | ios_xe | 3.8.7e:e |
cisco | ios_xe | 3.8.8e:e |
cisco | ios_xe | 3.8.9e:e |
cisco | ios_xe | 3.8.10e:e |
cisco | ios_xe | 3.8.10ee:ee |
cisco | ios_xe | 3.9.0as:as |
cisco | ios_xe | 3.9.0e:e |
cisco | ios_xe | 3.9.0s:s |
cisco | ios_xe | 3.9.1as:as |
cisco | ios_xe | 3.9.1e:e |
cisco | ios_xe | 3.9.1s:s |
cisco | ios_xe | 3.9.2e:e |
cisco | ios_xe | 3.9.2s:s |
cisco | ios_xe | 3.10.0ce:ce |
cisco | ios_xe | 3.10.0e:e |
cisco | ios_xe | 3.10.0s:s |
cisco | ios_xe | 3.10.1e:e |
cisco | ios_xe | 3.10.1s:s |
cisco | ios_xe | 3.10.1xbs:xbs |
cisco | ios_xe | 3.10.2e:e |
cisco | ios_xe | 3.10.2s:s |
cisco | ios_xe | 3.10.2ts:ts |
cisco | ios_xe | 3.10.3e:e |
cisco | ios_xe | 3.10.3s:s |
cisco | ios_xe | 3.10.4s:s |
cisco | ios_xe | 3.10.5s:s |
cisco | ios_xe | 3.10.6s:s |
cisco | ios_xe | 3.10.7s:s |
cisco | ios_xe | 3.10.8as:as |
cisco | ios_xe | 3.10.8s:s |
cisco | ios_xe | 3.10.9s:s |
cisco | ios_xe | 3.10.10s:s |
cisco | ios_xe | 3.11.0e:e |
cisco | ios_xe | 3.11.0s:s |
cisco | ios_xe | 3.11.1ae:ae |
cisco | ios_xe | 3.11.1e:e |
cisco | ios_xe | 3.11.1s:s |
cisco | ios_xe | 3.11.2e:e |
cisco | ios_xe | 3.11.2s:s |
cisco | ios_xe | 3.11.3ae:ae |
cisco | ios_xe | 3.11.3e:e |
cisco | ios_xe | 3.11.3s:s |
cisco | ios_xe | 3.11.4e:e |
cisco | ios_xe | 3.11.4s:s |
cisco | ios_xe | 3.11.5e:e |
cisco | ios_xe | 3.11.6e:e |
cisco | ios_xe | 3.11.7e:e |
cisco | ios_xe | 3.11.8e:e |
cisco | ios_xe | 3.11.9e:e |
cisco | ios_xe | 3.11.10e:e |
cisco | ios_xe | 3.12.0as:as |
cisco | ios_xe | 3.12.0s:s |
cisco | ios_xe | 3.12.1s:s |
cisco | ios_xe | 3.12.2s:s |
cisco | ios_xe | 3.12.3s:s |
cisco | ios_xe | 3.12.4s:s |
cisco | ios_xe | 3.13.0as:as |
cisco | ios_xe | 3.13.0s:s |
cisco | ios_xe | 3.13.1s:s |
cisco | ios_xe | 3.13.2as:as |
cisco | ios_xe | 3.13.2s:s |
cisco | ios_xe | 3.13.3s:s |
cisco | ios_xe | 3.13.4s:s |
cisco | ios_xe | 3.13.5as:as |
cisco | ios_xe | 3.13.5s:s |
cisco | ios_xe | 3.13.6as:as |
cisco | ios_xe | 3.13.6s:s |
cisco | ios_xe | 3.13.7as:as |
cisco | ios_xe | 3.13.7s:s |
cisco | ios_xe | 3.13.8s:s |
cisco | ios_xe | 3.13.9s:s |
cisco | ios_xe | 3.13.10s:s |
cisco | ios_xe | 3.14.0s:s |
cisco | ios_xe | 3.14.1s:s |
cisco | ios_xe | 3.14.2s:s |
cisco | ios_xe | 3.14.3s:s |
cisco | ios_xe | 3.14.4s:s |
cisco | ios_xe | 3.15.0s:s |
cisco | ios_xe | 3.15.1cs:cs |
cisco | ios_xe | 3.15.1s:s |
cisco | ios_xe | 3.15.2s:s |
cisco | ios_xe | 3.15.3s:s |
cisco | ios_xe | 3.15.4s:s |
cisco | ios_xe | 3.16.0cs:cs |
cisco | ios_xe | 3.16.0s:s |
cisco | ios_xe | 3.16.1as:as |
cisco | ios_xe | 3.16.1s:s |
cisco | ios_xe | 3.16.2as:as |
cisco | ios_xe | 3.16.2bs:bs |
cisco | ios_xe | 3.16.2s:s |
cisco | ios_xe | 3.16.3as:as |
cisco | ios_xe | 3.16.3s:s |
cisco | ios_xe | 3.16.4as:as |
cisco | ios_xe | 3.16.4bs:bs |
cisco | ios_xe | 3.16.4ds:ds |
cisco | ios_xe | 3.16.4s:s |
cisco | ios_xe | 3.16.5s:s |
cisco | ios_xe | 3.16.6bs:bs |
cisco | ios_xe | 3.16.6s:s |
cisco | ios_xe | 3.16.7as:as |
cisco | ios_xe | 3.16.7bs:bs |
cisco | ios_xe | 3.16.7s:s |
cisco | ios_xe | 3.16.8s:s |
cisco | ios_xe | 3.16.9s:s |
cisco | ios_xe | 3.16.10s:s |
cisco | ios_xe | 3.17.0s:s |
cisco | ios_xe | 3.17.1as:as |
cisco | ios_xe | 3.17.1s:s |
cisco | ios_xe | 3.17.2s:s |
cisco | ios_xe | 3.17.3s:s |
cisco | ios_xe | 3.17.4s:s |
cisco | ios_xe | 3.18.0as:as |
cisco | ios_xe | 3.18.0s:s |
cisco | ios_xe | 3.18.0sp:sp |
cisco | ios_xe | 3.18.1asp:asp |
cisco | ios_xe | 3.18.1bsp:bsp |
cisco | ios_xe | 3.18.1csp:csp |
cisco | ios_xe | 3.18.1s:s |
cisco | ios_xe | 3.18.1sp:sp |
cisco | ios_xe | 3.18.2asp:asp |
cisco | ios_xe | 3.18.2s:s |
cisco | ios_xe | 3.18.2sp:sp |
cisco | ios_xe | 3.18.3asp:asp |
cisco | ios_xe | 3.18.3bsp:bsp |
cisco | ios_xe | 3.18.3s:s |
cisco | ios_xe | 3.18.3sp:sp |
cisco | ios_xe | 3.18.4s:s |
cisco | ios_xe | 3.18.4sp:sp |
cisco | ios_xe | 3.18.5sp:sp |
cisco | ios_xe | 3.18.6sp:sp |
cisco | ios_xe | 3.18.7sp:sp |
cisco | ios_xe | 3.18.8asp:asp |
cisco | ios_xe | 3.18.9sp:sp |
cisco | ios_xe | 16.1.1 |
cisco | ios_xe | 16.1.2 |
cisco | ios_xe | 16.1.3 |
cisco | ios_xe | 16.2.1 |
cisco | ios_xe | 16.2.2 |
cisco | ios_xe | 16.3.1 |
cisco | ios_xe | 16.3.1a:a |
cisco | ios_xe | 16.3.2 |
cisco | ios_xe | 16.3.3 |
cisco | ios_xe | 16.3.4 |
cisco | ios_xe | 16.3.5 |
cisco | ios_xe | 16.3.5b:b |
cisco | ios_xe | 16.3.6 |
cisco | ios_xe | 16.3.7 |
cisco | ios_xe | 16.3.8 |
cisco | ios_xe | 16.3.9 |
cisco | ios_xe | 16.3.10 |
cisco | ios_xe | 16.3.11 |
cisco | ios_xe | 16.4.1 |
cisco | ios_xe | 16.4.2 |
cisco | ios_xe | 16.4.3 |
cisco | ios_xe | 16.5.1 |
cisco | ios_xe | 16.5.1a:a |
cisco | ios_xe | 16.5.1b:b |
cisco | ios_xe | 16.5.2 |
cisco | ios_xe | 16.5.3 |
cisco | ios_xe | 16.6.1 |
cisco | ios_xe | 16.6.2 |
cisco | ios_xe | 16.6.3 |
cisco | ios_xe | 16.6.4 |
cisco | ios_xe | 16.6.4a:a |
cisco | ios_xe | 16.6.5 |
cisco | ios_xe | 16.6.5a:a |
cisco | ios_xe | 16.6.6 |
cisco | ios_xe | 16.6.7 |
cisco | ios_xe | 16.6.8 |
cisco | ios_xe | 16.6.9 |
cisco | ios_xe | 16.6.10 |
cisco | ios_xe | 16.7.1 |
cisco | ios_xe | 16.7.1a:a |
cisco | ios_xe | 16.7.1b:b |
cisco | ios_xe | 16.7.2 |
cisco | ios_xe | 16.7.3 |
cisco | ios_xe | 16.7.4 |
cisco | ios_xe | 16.8.1 |
cisco | ios_xe | 16.8.1a:a |
cisco | ios_xe | 16.8.1b:b |
cisco | ios_xe | 16.8.1c:c |
cisco | ios_xe | 16.8.1d:d |
cisco | ios_xe | 16.8.1e:e |
cisco | ios_xe | 16.8.1s:s |
cisco | ios_xe | 16.8.2 |
cisco | ios_xe | 16.8.3 |
cisco | ios_xe | 16.9.1 |
cisco | ios_xe | 16.9.1a:a |
cisco | ios_xe | 16.9.1b:b |
cisco | ios_xe | 16.9.1s:s |
cisco | ios_xe | 16.9.2 |
cisco | ios_xe | 16.9.3 |
cisco | ios_xe | 16.9.3a:a |
cisco | ios_xe | 16.9.4 |
cisco | ios_xe | 16.9.5 |
cisco | ios_xe | 16.9.5f:f |
cisco | ios_xe | 16.9.6 |
cisco | ios_xe | 16.9.7 |
cisco | ios_xe | 16.9.8 |
cisco | ios_xe | 16.10.1 |
cisco | ios_xe | 16.10.1a:a |
cisco | ios_xe | 16.10.1b:b |
cisco | ios_xe | 16.10.1c:c |
cisco | ios_xe | 16.10.1d:d |
cisco | ios_xe | 16.10.1e:e |
cisco | ios_xe | 16.10.1f:f |
cisco | ios_xe | 16.10.1g:g |
cisco | ios_xe | 16.10.1s:s |
cisco | ios_xe | 16.10.2 |
cisco | ios_xe | 16.10.3 |
cisco | ios_xe | 16.11.1 |
cisco | ios_xe | 16.11.1a:a |
cisco | ios_xe | 16.11.1b:b |
cisco | ios_xe | 16.11.1s:s |
cisco | ios_xe | 16.11.2 |
cisco | ios_xe | 16.12.1 |
cisco | ios_xe | 16.12.1a:a |
cisco | ios_xe | 16.12.1c:c |
cisco | ios_xe | 16.12.1s:s |
cisco | ios_xe | 16.12.1t:t |
cisco | ios_xe | 16.12.1w:w |
cisco | ios_xe | 16.12.1x:x |
cisco | ios_xe | 16.12.1y:y |
cisco | ios_xe | 16.12.1z1:z1 |
cisco | ios_xe | 16.12.1z2:z2 |
cisco | ios_xe | 16.12.2 |
cisco | ios_xe | 16.12.2a:a |
cisco | ios_xe | 16.12.2s:s |
cisco | ios_xe | 16.12.3 |
cisco | ios_xe | 16.12.3a:a |
cisco | ios_xe | 16.12.3s:s |
cisco | ios_xe | 16.12.4 |
cisco | ios_xe | 16.12.4a:a |
cisco | ios_xe | 16.12.5 |
cisco | ios_xe | 16.12.5a:a |
cisco | ios_xe | 16.12.5b:b |
cisco | ios_xe | 16.12.6 |
cisco | ios_xe | 16.12.6a:a |
cisco | ios_xe | 16.12.7 |
cisco | ios_xe | 16.12.8 |
cisco | ios_xe | 16.12.9 |
cisco | ios_xe | 16.12.10 |
cisco | ios_xe | 16.12.10a:a |
cisco | ios_xe | 16.12.11 |
cisco | ios_xe | 17.1.1 |
cisco | ios_xe | 17.1.1a:a |
cisco | ios_xe | 17.1.1s:s |
cisco | ios_xe | 17.1.1t:t |
cisco | ios_xe | 17.1.3 |
cisco | ios_xe | 17.2.1 |
cisco | ios_xe | 17.2.1a:a |
cisco | ios_xe | 17.2.1r:r |
cisco | ios_xe | 17.2.1v:v |
cisco | ios_xe | 17.2.2 |
cisco | ios_xe | 17.2.3 |
cisco | ios_xe | 17.3.1 |
cisco | ios_xe | 17.3.1a:a |
cisco | ios_xe | 17.3.1w:w |
cisco | ios_xe | 17.3.1x:x |
cisco | ios_xe | 17.3.1z:z |
cisco | ios_xe | 17.3.2 |
cisco | ios_xe | 17.3.2a:a |
cisco | ios_xe | 17.3.3 |
cisco | ios_xe | 17.3.4 |
cisco | ios_xe | 17.3.4a:a |
cisco | ios_xe | 17.3.4b:b |
cisco | ios_xe | 17.3.4c:c |
cisco | ios_xe | 17.3.5 |
cisco | ios_xe | 17.3.5a:a |
cisco | ios_xe | 17.3.5b:b |
cisco | ios_xe | 17.3.6 |
cisco | ios_xe | 17.3.7 |
cisco | ios_xe | 17.3.8 |
cisco | ios_xe | 17.3.8a:a |
cisco | ios_xe | 17.4.1 |
cisco | ios_xe | 17.4.1a:a |
cisco | ios_xe | 17.4.1b:b |
cisco | ios_xe | 17.4.2 |
cisco | ios_xe | 17.4.2a:a |
cisco | ios_xe | 17.5.1 |
cisco | ios_xe | 17.5.1a:a |
cisco | ios_xe | 17.6.1 |
cisco | ios_xe | 17.6.1a:a |
cisco | ios_xe | 17.6.1w:w |
cisco | ios_xe | 17.6.1x:x |
cisco | ios_xe | 17.6.1y:y |
cisco | ios_xe | 17.6.1z:z |
cisco | ios_xe | 17.6.1z1:z1 |
cisco | ios_xe | 17.6.2 |
cisco | ios_xe | 17.6.3 |
cisco | ios_xe | 17.6.3a:a |
cisco | ios_xe | 17.6.4 |
cisco | ios_xe | 17.6.5 |
cisco | ios_xe | 17.6.5a:a |
cisco | ios_xe | 17.6.6 |
cisco | ios_xe | 17.6.6a:a |
cisco | ios_xe | 17.6.7 |
cisco | ios_xe | 17.7.1 |
cisco | ios_xe | 17.7.1a:a |
cisco | ios_xe | 17.7.1b:b |
cisco | ios_xe | 17.7.2 |
cisco | ios_xe | 17.8.1 |
cisco | ios_xe | 17.8.1a:a |
cisco | ios_xe | 17.9.1 |
cisco | ios_xe | 17.9.1a:a |
cisco | ios_xe | 17.9.1w:w |
cisco | ios_xe | 17.9.1x:x |
cisco | ios_xe | 17.9.1x1:x1 |
cisco | ios_xe | 17.9.1y:y |
cisco | ios_xe | 17.9.1y1:y1 |
cisco | ios_xe | 17.9.2 |
cisco | ios_xe | 17.9.2a:a |
cisco | ios_xe | 17.9.3 |
cisco | ios_xe | 17.9.3a:a |
cisco | ios_xe | 17.9.4 |
cisco | ios_xe | 17.9.4a:a |
cisco | ios_xe | 17.9.5 |
cisco | ios_xe | 17.9.5a:a |
cisco | ios_xe | 17.9.5b:b |
cisco | ios_xe | 17.10.1 |
cisco | ios_xe | 17.10.1a:a |
cisco | ios_xe | 17.10.1b:b |
cisco | ios_xe | 17.11.1 |
cisco | ios_xe | 17.11.1a:a |
cisco | ios_xe | 17.11.99sw:sw |
cisco | ios_xe | 17.12.1 |
cisco | ios_xe | 17.12.1a:a |
cisco | ios_xe | 17.12.1w:w |
cisco | ios_xe | 17.12.1x:x |
cisco | ios_xe | 17.12.1y:y |
cisco | ios_xe | 17.12.2 |
cisco | ios_xe | 17.12.2a:a |
cisco | ios_xe | 17.12.3 |
cisco | ios_xe | 17.12.3a:a |
cisco | ios_xe | 17.13.1 |
cisco | ios_xe | 17.13.1a:a |
cisco | ios | 15.2\(6\)e2 |
cisco | ios | 15.2\(6\)e2a |
cisco | ios | 15.2\(6\)e2b |
cisco | ios | 15.2\(6\)e3 |
cisco | ios | 15.2\(6\)eb |
cisco | ios | 15.2\(7\)e |
cisco | ios | 15.2\(7\)e0a |
cisco | ios | 15.2\(7\)e0b |
cisco | ios | 15.2\(7\)e0s |
cisco | ios | 15.2\(7\)e1 |
cisco | ios | 15.2\(7\)e1a |
cisco | ios | 15.2\(7\)e2 |
cisco | ios | 15.2\(7\)e2a |
cisco | ios | 15.2\(7\)e3 |
cisco | ios | 15.2\(7\)e3k |
cisco | ios | 15.2\(7\)e4 |
cisco | ios | 15.2\(7\)e5 |
cisco | ios | 15.2\(7\)e6 |
cisco | ios | 15.2\(7\)e7 |
cisco | ios | 15.2\(7\)e8 |
cisco | ios | 15.2\(7\)e9 |
cisco | ios | 15.2\(7\)e10 |
cisco | ios | 15.2\(7a\)e0b |
cisco | ios | 15.2\(7b\)e0b |
cisco | ios | 15.2\(8\)e |
cisco | ios | 15.2\(8\)e1 |
cisco | ios | 15.2\(8\)e2 |
cisco | ios | 15.2\(8\)e3 |
cisco | ios | 15.2\(8\)e4 |
cisco | ios | 15.2\(8\)e5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-285 - Improper AuthorizationThe software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-352 - Cross-Site Request Forgery (CSRF)The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.