CVE-2024-20498

HIGH
Published Oct 2, 2024 Modified Jun 4, 2025 CWE-415

Description

Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request to the VPN server of an affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and reauthenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention.

Is your site exposed to CVE-2024-20498?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.6
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness Type (CWE)

CWE-415 CWE-415

Affected Products

Vendor Product
cisco meraki_mx65_firmware
cisco meraki_mx65
cisco meraki_mx64_firmware
cisco meraki_mx64
cisco meraki_z4c_firmware
cisco meraki_z4c
cisco meraki_z4_firmware
cisco meraki_z4
cisco meraki_z3c_firmware
cisco meraki_z3c
cisco meraki_z3_firmware
cisco meraki_z3
cisco meraki_vmx_firmware
cisco meraki_vmx
cisco meraki_mx600_firmware
cisco meraki_mx600
cisco meraki_mx450_firmware
cisco meraki_mx450
cisco meraki_mx400_firmware
cisco meraki_mx400
cisco meraki_mx250_firmware
cisco meraki_mx250
cisco meraki_mx105_firmware
cisco meraki_mx105
cisco meraki_mx100_firmware
cisco meraki_mx100
cisco meraki_mx95_firmware
cisco meraki_mx95
cisco meraki_mx85_firmware
cisco meraki_mx85
cisco meraki_mx84_firmware
cisco meraki_mx84
cisco meraki_mx75_firmware
cisco meraki_mx75
cisco meraki_mx68w_firmware
cisco meraki_mx68w
cisco meraki_mx68cw_firmware
cisco meraki_mx68cw
cisco meraki_mx68_firmware
cisco meraki_mx68
cisco meraki_mx67w_firmware
cisco meraki_mx67w
cisco meraki_mx67c_firmware
cisco meraki_mx67c
cisco meraki_mx67_firmware
cisco meraki_mx67
cisco meraki_mx65w_firmware
cisco meraki_mx65w
cisco meraki_mx64w_firmware
cisco meraki_mx64w

References

Frequently Asked Questions

What is CVE-2024-20498? +
Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in the AnyConnect service on an affected device. These vulnerabilities are due to insufficient validation of client-supplied parameters while establishing an SSL VPN session. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request to the VPN server of an affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to restart, resulting in the failure of the established SSL VPN connections and forcing remote users to initiate a new VPN connection and reauthenticate. A sustained attack could prevent new SSL VPN connections from being established. Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers gracefully without requiring manual intervention. It has a CVSS v3.1 base score of 8.6 (HIGH).
How severe is CVE-2024-20498? +
CVE-2024-20498 has a CVSS v3.1 score of 8.6 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-20498? +
CVE-2024-20498 affects products from cisco, specifically: meraki_mx100, meraki_mx100_firmware, meraki_mx105, meraki_mx105_firmware, meraki_mx250, meraki_mx250_firmware, meraki_mx400, meraki_mx400_firmware, meraki_mx450, meraki_mx450_firmware, meraki_mx600, meraki_mx600_firmware, meraki_mx64, meraki_mx64_firmware, meraki_mx64w, meraki_mx64w_firmware, meraki_mx65, meraki_mx65_firmware, meraki_mx65w, meraki_mx65w_firmware, meraki_mx67, meraki_mx67_firmware, meraki_mx67c, meraki_mx67c_firmware, meraki_mx67w, meraki_mx67w_firmware, meraki_mx68, meraki_mx68_firmware, meraki_mx68cw, meraki_mx68cw_firmware, meraki_mx68w, meraki_mx68w_firmware, meraki_mx75, meraki_mx75_firmware, meraki_mx84, meraki_mx84_firmware, meraki_mx85, meraki_mx85_firmware, meraki_mx95, meraki_mx95_firmware, meraki_vmx, meraki_vmx_firmware, meraki_z3, meraki_z3_firmware, meraki_z3c, meraki_z3c_firmware, meraki_z4, meraki_z4_firmware, meraki_z4c, meraki_z4c_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-20498? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-20498 — free, no signup required.