CVE-2024-20484
Vulnerability from cvelistv5
Published
2024-11-06 16:29
Modified
2024-11-06 17:20
Summary
A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic that is received by an affected device. An attacker could exploit this vulnerability by sending crafted MR PIM traffic to an affected device. A successful exploit could allow the attacker to trigger a failure on the MR PIM connection between Cisco ECE and Cisco Unified Contact Center Enterprise (CCE), leading to a DoS condition on EAAS that would prevent customers from starting chat, callback, or delayed callback sessions. Note: When the attack traffic stops, the EAAS process must be manually restarted to restore normal operation. To restart the process in the System Console, choose Shared Resources > Services > Unified CCE > EAAS, then click Start.
Impacted products
Vendor Product Version
Cisco Cisco Enterprise Chat and Email Version: 11.6(1)_ES3
Version: 11.6(1)_ES4
Version: 12.0(1)_ES6
Version: 11.6(1)_ES9
Version: 11.6(1)_ES6
Version: 11.6(1)_ES5
Version: 12.5(1)_ET1
Version: 12.5(1)_ES3_ET1
Version: 12.0(1)_ES3
Version: 11.6(1)_ES11
Version: 12.0(1)_ES4
Version: 12.0(1)_ES5
Version: 11.6(1)_ES2
Version: 11.6(1)_ES9a
Version: 11.6(1)_ES10
Version: 12.0(1)_ES1
Version: 12.0(1)
Version: 12.5(1)_ES3
Version: 12.6(1)
Version: 11.5(1)
Version: 12.0(1)_ES2
Version: 11.6(1)_ES7
Version: 12.6(1)_ET1
Version: 11.6(1)
Version: 12.6(1)_ET2
Version: 12.5(1)_ES3_ET2
Version: 12.0(1)_ES6_ET2
Version: 12.6(1)_ES1
Version: 11.6(1)_ES12
Version: 12.6(1)_ET3
Version: 12.5(1)_ES4_ET1
Version: 12.0(1)_ES6_ET3
Version: 12.6(1)_ES1_ET1
Version: 12.6(1)_ES2
Version: 12.6_ES2_ET1
Version: 12.5(1)_ES5
Version: 12.6_ES2_ET2
Version: 12.0(1)_ES7
Version: 12.6_ES2_ET3
Version: 12.0(1)_ES7_ET1
Version: 12.5(1)_ES5_ET1
Version: 12.6_ES2_ET4
Version: 12.6(1)_ES3
Version: 11.6(1)_ES12_ET1
Version: 12.6_ES3_ET1
Version: 12.6_ES3_ET2
Version: 12.6(1)_ES4
Version: 12.5(1)_ES7
Version: 12.6(1)_ES4_ET1
Version: 12.6(1)_ES5
Version: 12.6(1)_ES5_ET1
Version: 12.6(1)_ES5_ET2
Version: 12.6(1)_ES6
Version: 12.6(1)_ES6_ET1
Version: 12.5(1)_ES8
Version: 12.6(1)_ES6_ET2
Version: 12.6(1)_ES7
Version: 12.6(1)_ES8
Version: 12.6(1)_ES4_ET2
Version: 12.6(1)_ES3_ET3
Version: 12.6(1)_ES2_ET5
Version: 12.6(1)_ES1_ET2
Version: 12.6(1)_ES8_ET1
Version: 12.6(1)_ES7_ET1
Version: 12.6(1)_ES6_ET3
Version: 12.6(1)_ES5_ET3
Version: 12.5(1)_ES8_ET1
Version: 12.5(1)_ES3_ET3
Version: 12.5(1)_ES5_ET2
Version: 12.5(1)_ES6_ET1
Version: 12.5(1)_ES4_ET2
Version: 12.5(1)_ES7_ET1
Version: 12.6(1)_ES8_ET2
Version: 12.6(1)_ES9
Version: 12.6(1)_ES9_ET1
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:cisco:enterprise_chat_and_email:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "enterprise_chat_and_email",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "11.6(1)_ES3"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES4"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES6"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES9"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES6"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES5"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES3_ET1"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES3"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES11"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES4"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES5"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES2"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES9a"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES10"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES1"
              },
              {
                "status": "affected",
                "version": "12.0(1)"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES3"
              },
              {
                "status": "affected",
                "version": "12.6(1)"
              },
              {
                "status": "affected",
                "version": "11.5(1)"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES2"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES7"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ET1"
              },
              {
                "status": "affected",
                "version": "11.6(1)"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ET2"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES3_ET2"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES6_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES1"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES12"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ET3"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES4_ET1"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES6_ET3"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES1_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES2"
              },
              {
                "status": "affected",
                "version": "12.6_ES2_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES5"
              },
              {
                "status": "affected",
                "version": "12.6_ES2_ET2"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES7"
              },
              {
                "status": "affected",
                "version": "12.6_ES2_ET3"
              },
              {
                "status": "affected",
                "version": "12.0(1)_ES7_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES5_ET1"
              },
              {
                "status": "affected",
                "version": "12.6_ES2_ET4"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES3"
              },
              {
                "status": "affected",
                "version": "11.6(1)_ES12_ET1"
              },
              {
                "status": "affected",
                "version": "12.6_ES3_ET1"
              },
              {
                "status": "affected",
                "version": "12.6_ES3_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES4"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES7"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES4_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES5"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES5_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES5_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES6"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES6_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES8"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES6_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES7"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES8"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES4_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES3_ET3"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES2_ET5"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES1_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES8_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES7_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES6_ET3"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES5_ET3"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES8_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES3_ET3"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES5_ET2"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES6_ET1"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES4_ET2"
              },
              {
                "status": "affected",
                "version": "12.5(1)_ES7_ET1"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES8_ET2"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES9"
              },
              {
                "status": "affected",
                "version": "12.6(1)_ES9_ET1"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20484",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-06T17:20:15.324243Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-06T17:20:30.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Enterprise Chat and Email",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "11.6(1)_ES3"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES4"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES6"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES9"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES6"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES5"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES3_ET1"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES3"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES11"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES4"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES5"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES2"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES9a"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES10"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES1"
            },
            {
              "status": "affected",
              "version": "12.0(1)"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES3"
            },
            {
              "status": "affected",
              "version": "12.6(1)"
            },
            {
              "status": "affected",
              "version": "11.5(1)"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES2"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES7"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ET1"
            },
            {
              "status": "affected",
              "version": "11.6(1)"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ET2"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES3_ET2"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES6_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES1"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES12"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ET3"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES4_ET1"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES6_ET3"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES1_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES2"
            },
            {
              "status": "affected",
              "version": "12.6_ES2_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES5"
            },
            {
              "status": "affected",
              "version": "12.6_ES2_ET2"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES7"
            },
            {
              "status": "affected",
              "version": "12.6_ES2_ET3"
            },
            {
              "status": "affected",
              "version": "12.0(1)_ES7_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES5_ET1"
            },
            {
              "status": "affected",
              "version": "12.6_ES2_ET4"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES3"
            },
            {
              "status": "affected",
              "version": "11.6(1)_ES12_ET1"
            },
            {
              "status": "affected",
              "version": "12.6_ES3_ET1"
            },
            {
              "status": "affected",
              "version": "12.6_ES3_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES4"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES7"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES4_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES5"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES5_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES5_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES6"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES6_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES8"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES6_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES7"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES8"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES4_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES3_ET3"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES2_ET5"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES1_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES8_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES7_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES6_ET3"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES5_ET3"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES8_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES3_ET3"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES5_ET2"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES6_ET1"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES4_ET2"
            },
            {
              "status": "affected",
              "version": "12.5(1)_ES7_ET1"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES8_ET2"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES9"
            },
            {
              "status": "affected",
              "version": "12.6(1)_ES9_ET1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic that is received by an affected device. An attacker could exploit this vulnerability by sending crafted MR PIM traffic to an affected device. A successful exploit could allow the attacker to trigger a failure on the MR PIM connection between Cisco ECE and Cisco Unified Contact Center Enterprise (CCE), leading to a DoS condition on EAAS that would prevent customers from starting chat, callback, or delayed callback sessions. Note: When the attack traffic stops, the EAAS process must be manually restarted to restore normal operation. To restart the process in the System Console, choose Shared Resources \u0026gt; Services \u0026gt; Unified CCE \u0026gt; EAAS, then click Start."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "Improper Input Validation",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-06T16:29:20.865Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-ece-dos-Oqb9uFEv",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-dos-Oqb9uFEv"
        }
      ],
      "source": {
        "advisory": "cisco-sa-ece-dos-Oqb9uFEv",
        "defects": [
          "CSCwj26667"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Enterprise Chat and Email Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20484",
    "datePublished": "2024-11-06T16:29:20.865Z",
    "dateReserved": "2023-11-08T15:08:07.684Z",
    "dateUpdated": "2024-11-06T17:20:30.979Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-20484\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2024-11-06T17:15:15.580\",\"lastModified\":\"2024-11-06T18:17:17.287\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic that is received by an affected device. An attacker could exploit this vulnerability by sending crafted MR PIM traffic to an affected device. A successful exploit could allow the attacker to trigger a failure on the MR PIM connection between Cisco ECE and Cisco Unified Contact Center Enterprise (CCE), leading to a DoS condition on EAAS that would prevent customers from starting chat, callback, or delayed callback sessions. Note: When the attack traffic stops, the EAAS process must be manually restarted to restore normal operation. To restart the process in the System Console, choose Shared Resources \u0026gt; Services \u0026gt; Unified CCE \u0026gt; EAAS, then click Start.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la funci\u00f3n External Agent Assignment Service (EAAS) de Cisco Enterprise Chat and Email (ECE) podr\u00eda permitir que un atacante remoto no autenticado provoque una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente del tr\u00e1fico de Media Routing Peripheral Interface Manager (MR PIM) que recibe un dispositivo afectado. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando tr\u00e1fico MR PIM manipulado a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir que el atacante provoque una falla en la conexi\u00f3n MR PIM entre Cisco ECE y Cisco Unified Contact Center Enterprise (CCE), lo que provocar\u00eda una condici\u00f3n de DoS en EAAS que evitar\u00eda que los clientes inicien sesiones de chat, devoluci\u00f3n de llamadas o devoluci\u00f3n de llamadas retrasadas. Nota: Cuando el tr\u00e1fico del ataque se detiene, el proceso EAAS debe reiniciarse manualmente para restablecer el funcionamiento normal. Para reiniciar el proceso en la consola del sistema, seleccione Recursos compartidos \u0026gt; Servicios \u0026gt; Unified CCE \u0026gt; EAAS y, a continuaci\u00f3n, haga clic en Iniciar.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-dos-Oqb9uFEv\",\"source\":\"ykramarz@cisco.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"cna\": {\"title\": \"Cisco Enterprise Chat and Email Denial of Service Vulnerability\", \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\\r\\n\\r\\nThis vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic that is received by an affected device. An attacker could exploit this vulnerability by sending crafted MR PIM traffic to an affected device. A successful exploit could allow the attacker to trigger a failure on the MR PIM connection between Cisco ECE and Cisco Unified Contact Center Enterprise (CCE), leading to a DoS condition on EAAS that would prevent customers from starting chat, callback, or delayed callback sessions. Note: When the attack traffic stops, the EAAS process must be manually restarted to restore normal operation. To restart the process in the System Console, choose Shared Resources \u0026gt; Services \u0026gt; Unified CCE \u0026gt; EAAS, then click Start.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ece-dos-Oqb9uFEv\", \"name\": \"cisco-sa-ece-dos-Oqb9uFEv\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"source\": {\"advisory\": \"cisco-sa-ece-dos-Oqb9uFEv\", \"discovery\": \"INTERNAL\", \"defects\": [\"CSCwj26667\"]}, \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"Improper Input Validation\", \"type\": \"cwe\", \"cweId\": \"CWE-20\"}]}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Enterprise Chat and Email\", \"versions\": [{\"version\": \"11.6(1)_ES3\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES4\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES6\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES9\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES6\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES5\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES3_ET1\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES3\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES11\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES4\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES5\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES2\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES9a\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES10\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES1\", \"status\": \"affected\"}, {\"version\": \"12.0(1)\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES3\", \"status\": \"affected\"}, {\"version\": \"12.6(1)\", \"status\": \"affected\"}, {\"version\": \"11.5(1)\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES2\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES7\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ET1\", \"status\": \"affected\"}, {\"version\": \"11.6(1)\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ET2\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES3_ET2\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES6_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES1\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES12\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ET3\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES4_ET1\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES6_ET3\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES1_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES2\", \"status\": \"affected\"}, {\"version\": \"12.6_ES2_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES5\", \"status\": \"affected\"}, {\"version\": \"12.6_ES2_ET2\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES7\", \"status\": \"affected\"}, {\"version\": \"12.6_ES2_ET3\", \"status\": \"affected\"}, {\"version\": \"12.0(1)_ES7_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES5_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6_ES2_ET4\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES3\", \"status\": \"affected\"}, {\"version\": \"11.6(1)_ES12_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6_ES3_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6_ES3_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES4\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES7\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES4_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES5\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES5_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES5_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES6\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES6_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES8\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES6_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES7\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES8\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES4_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES3_ET3\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES2_ET5\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES1_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES8_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES7_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES6_ET3\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES5_ET3\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES8_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES3_ET3\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES5_ET2\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES6_ET1\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES4_ET2\", \"status\": \"affected\"}, {\"version\": \"12.5(1)_ES7_ET1\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES8_ET2\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES9\", \"status\": \"affected\"}, {\"version\": \"12.6(1)_ES9_ET1\", \"status\": \"affected\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-11-06T16:29:20.865Z\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-20484\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-06T17:20:15.324243Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:cisco:enterprise_chat_and_email:*:*:*:*:*:*:*:*\"], \"vendor\": \"cisco\", \"product\": \"enterprise_chat_and_email\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.6(1)_ES3\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES4\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES6\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES9\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES6\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES5\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES3_ET1\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES3\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES11\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES4\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES5\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES2\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES9a\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES10\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES1\"}, {\"status\": \"affected\", \"version\": \"12.0(1)\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES3\"}, {\"status\": \"affected\", \"version\": \"12.6(1)\"}, {\"status\": \"affected\", \"version\": \"11.5(1)\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES2\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES7\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ET1\"}, {\"status\": \"affected\", \"version\": \"11.6(1)\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ET2\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES3_ET2\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES6_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES1\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES12\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ET3\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES4_ET1\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES6_ET3\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES1_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES2\"}, {\"status\": \"affected\", \"version\": \"12.6_ES2_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES5\"}, {\"status\": \"affected\", \"version\": \"12.6_ES2_ET2\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES7\"}, {\"status\": \"affected\", \"version\": \"12.6_ES2_ET3\"}, {\"status\": \"affected\", \"version\": \"12.0(1)_ES7_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES5_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6_ES2_ET4\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES3\"}, {\"status\": \"affected\", \"version\": \"11.6(1)_ES12_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6_ES3_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6_ES3_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES4\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES7\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES4_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES5\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES5_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES5_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES6\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES6_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES8\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES6_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES7\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES8\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES4_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES3_ET3\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES2_ET5\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES1_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES8_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES7_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES6_ET3\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES5_ET3\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES8_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES3_ET3\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES5_ET2\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES6_ET1\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES4_ET2\"}, {\"status\": \"affected\", \"version\": \"12.5(1)_ES7_ET1\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES8_ET2\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES9\"}, {\"status\": \"affected\", \"version\": \"12.6(1)_ES9_ET1\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-06T17:12:18.864Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-20484\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"cisco\", \"dateReserved\": \"2023-11-08T15:08:07.684Z\", \"datePublished\": \"2024-11-06T16:29:20.865Z\", \"dateUpdated\": \"2024-11-06T17:20:30.979Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.