Medium severity5.8NVD Advisory· Published Sep 25, 2024· Updated Jun 17, 2026

CVE-2024-20465

Description

A vulnerability in the access control list (ACL) programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect handling of IPv4 ACLs on switched virtual interfaces when an administrator enables and disables Resilient Ethernet Protocol (REP). An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cisco iOSv55 versions
15.2(8)E2+ 4 more
- (no CPE)range: 15.2(8)E2
- cpe:2.3:o:cisco:ios:15.2\(8\)e2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:15.2\(8\)e3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:15.2\(8\)e4:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ios:15.2\(8\)e5:*:*:*:*:*:*:*
Cisco Systems, Inc./iOS Xr Softwarellm-fuzzy
Cisco Systems, Inc./Industrial Ethernet 4000, 4010, and 5000 Series Switchesllm-create

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-repacl-9eXgnBpDnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000