Home Cisco CVE-2024-20484
Back to Cisco

CVE-2024-20484

Cisco Enterprise Chat and Email - External Agent Assignment Service

Cisco CVSS 7.5 Updated March 16, 2026

Executive Risk Summary

"A vulnerability in the External Agent Assignment Service (EAAS) feature of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of Media Routing Peripheral Interface Manager (MR PIM) traffic, which could be exploited by sending crafted MR PIM traffic to an affected device."

Operational Audit Arsenal

Target Type Service
Target Asset EAAS
Standard Path Global Firmware

Manual Verification Required

This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.

Patch Impact Forecast

Reboot Required Likely

High

Internal Work Notes

Denial of Service vulnerability in Cisco ECE EAAS, requiring manual restart of EAAS process after attack traffic stops.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Cisco Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.