Lucene search

[email protected]CVE-2020-3363

HistoryAug 17, 2020 - 6:15 p.m.

CVE-2020-3363

2020-08-1718:15:12

CWE-20

[email protected]

web.nvd.nist.gov

cisco

small business

switch

ipv6

dos

vulnerability

nvd

cve-2020-3363

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause an unexpected reboot of the switch, leading to a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.

Affected configurations

NVD

Node

ciscosg250x-24_firmwareMatch-

AND

ciscosg250x-24Match-

Node

ciscosg250x-24p_firmwareMatch-

AND

ciscosg250x-24pMatch-

Node

ciscosg250x-48_firmwareMatch-

AND

ciscosg250x-48Match-

Node

ciscosg250x-48p_firmwareMatch-

AND

ciscosg250x-48pMatch-

Node

ciscosg250-08_firmwareMatch-

AND

ciscosg250-08Match-

Node

ciscosg250-08hp_firmwareMatch-

AND

ciscosg250-08hpMatch-

Node

ciscosg250-10p_firmwareMatch-

AND

ciscosg250-10pMatch-

Node

ciscosg250-18_firmwareMatch-

AND

ciscosg250-18Match-

Node

ciscosg250-26_firmwareMatch-

AND

ciscosg250-26Match-

Node

ciscosg250-26hp_firmwareMatch-

AND

ciscosg250-26hpMatch-

Node

ciscosg250-26p_firmwareMatch-

AND

ciscosg250-26pMatch-

Node

ciscosg250-50_firmwareMatch-

AND

ciscosg250-50Match-

Node

ciscosg250-50hp_firmwareMatch-

AND

ciscosg250-50hpMatch-

Node

ciscosg250-50p_firmwareMatch-

AND

ciscosg250-50pMatch-

Node

ciscosf250-24_firmwareMatch-

AND

ciscosf250-24Match-

Node

ciscosf250-24p_firmwareMatch-

AND

ciscosf250-24pMatch-

Node

ciscosf250-48_firmwareMatch-

AND

ciscosf250-48Match-

Node

ciscosf250-48hp_firmwareMatch-

AND

ciscosf250-48hpMatch-

Node

ciscosg350-10_firmwareMatch-

AND

ciscosg350-10Match-

Node

ciscosg350-10p_firmwareMatch-

AND

ciscosg350-10pMatch-

Node

ciscosg350-10mp_firmwareMatch-

AND

ciscosg350-10mpMatch-

Node

ciscosg355-10p_firmwareMatch-

AND

ciscosg355-10pMatch-

Node

ciscosg350-28_firmwareMatch-

AND

ciscosg350-28Match-

Node

ciscosg350-28p_firmwareMatch-

AND

ciscosg350-28pMatch-

Node

ciscosg350-28mp_firmwareMatch-

AND

ciscosg350-28mpMatch-

Node

ciscosf350-48_firmwareMatch-

AND

ciscosf350-48Match-

Node

ciscosf350-48p_firmwareMatch-

AND

ciscosf350-48pMatch-

Node

ciscosf350-48mp_firmwareMatch-

AND

ciscosf350-48mpMatch-

Node

ciscosg350xg-2f10_firmwareMatch-

AND

ciscosg350xg-2f10Match-

Node

ciscosg350xg-24f_firmwareMatch-

AND

ciscosg350xg-24fMatch-

Node

ciscosg350xg-24t_firmwareMatch-

AND

ciscosg350xg-24tMatch-

Node

ciscosg350xg-48t_firmwareMatch-

AND

ciscosg350xg-48tMatch-

Node

ciscosg350x-24_firmwareMatch-

AND

ciscosg350x-24Match-

Node

ciscosg350x-24p_firmwareMatch-

AND

ciscosg350x-24pMatch-

Node

ciscosg350x-24mp_firmwareMatch-

AND

ciscosg350x-24mpMatch-

Node

ciscosg350x-48_firmwareMatch-

AND

ciscosg350x-48Match-

Node

ciscosg350x-48p_firmwareMatch-

AND

ciscosg350x-48pMatch-

Node

ciscosg350x-48mp_firmwareMatch-

AND

ciscosg350x-48mpMatch-

Node

ciscosx550x-16ft_firmwareMatch-

AND

ciscosx550x-16ftMatch-

Node

ciscosx550x-24ft_firmwareMatch-

AND

ciscosx550x-24ftMatch-

Node

ciscosx550x-12f_firmwareMatch-

AND

ciscosx550x-12fMatch-

Node

ciscosx550x-24f_firmwareMatch-

AND

ciscosx550x-24fMatch-

Node

ciscosx550x-24_firmwareMatch-

AND

ciscosx550x-24Match-

Node

ciscosx550x-52_firmwareMatch-

AND

ciscosx550x-52Match-

Node

ciscosg550x-24_firmwareMatch-

AND

ciscosg550x-24Match-

Node

ciscosg550x-24p_firmwareMatch-

AND

ciscosg550x-24pMatch-

Node

ciscosg550x-24mp_firmwareMatch-

AND

ciscosg550x-24mpMatch-

Node

ciscosg550x-24mpp_firmwareMatch-

AND

ciscosg550x-24mppMatch-

Node

ciscosg550x-48_firmwareMatch-

AND

ciscosg550x-48Match-

Node

ciscosg550x-48p_firmwareMatch-

AND

ciscosg550x-48pMatch-

Node

ciscosg550x-48mp_firmwareMatch-

AND

ciscosg550x-48mpMatch-

Node

ciscosf550x-24_firmwareMatch-

AND

ciscosf550x-24Match-

Node

ciscosf550x-24p_firmwareMatch-

AND

ciscosf550x-24pMatch-

Node

ciscosf550x-24mp_firmwareMatch-

AND

ciscosf550x-24mpMatch-

Node

ciscosf550x-48_firmwareMatch-

AND

ciscosf550x-48Match-

Node

ciscosf550x-48p_firmwareMatch-

AND

ciscosf550x-48pMatch-

Node

ciscosf550x-48mp_firmwareMatch-

AND

ciscosf550x-48mpMatch-

Node

ciscosg200-50_firmwareMatch-

AND

ciscosg200-50Match-

Node

ciscosg200-50p_firmwareMatch-

AND

ciscosg200-50pMatch-

Node

ciscosg200-50fp_firmwareMatch-

AND

ciscosg200-50fpMatch-

Node

ciscosg200-26_firmwareMatch-

AND

ciscosg200-26Match-

Node

ciscosg200-26p_firmwareMatch-

AND

ciscosg200-26pMatch-

Node

ciscosg200-26fp_firmwareMatch-

AND

ciscosg200-26fpMatch-

Node

ciscosg200-18_firmwareMatch-

AND

ciscosg200-18Match-

Node

ciscosg200-10fp_firmwareMatch-

AND

ciscosg200-10fpMatch-

Node

ciscosg200-08_firmwareMatch-

AND

ciscosg200-08Match-

Node

ciscosg200-08p_firmwareMatch-

AND

ciscosg200-08pMatch-

Node

ciscosf200-24_firmwareMatch-

AND

ciscosf200-24Match-

Node

ciscosf200-24p_firmwareMatch-

AND

ciscosf200-24pMatch-

Node

ciscosf200-24fp_firmwareMatch-

AND

ciscosf200-24fpMatch-

Node

ciscosf200-48_firmwareMatch-

AND

ciscosf200-48Match-

Node

ciscosf200-48p_firmwareMatch-

AND

ciscosf200-48pMatch-

Node

ciscosf302-08pp_firmwareMatch-

AND

ciscosf302-08ppMatch-

Node

ciscosf302-08mpp_firmwareMatch-

AND

ciscosf302-08mppMatch-

Node

ciscosg300-10pp_firmwareMatch-

AND

ciscosg300-10ppMatch-

Node

ciscosg300-10mpp_firmwareMatch-

AND

ciscosg300-10mppMatch-

Node

ciscosf300-24pp_firmwareMatch-

AND

ciscosf300-24ppMatch-

Node

ciscosf300-48pp_firmwareMatch-

AND

ciscosf300-48ppMatch-

Node

ciscosg300-28pp_firmwareMatch-

AND

ciscosg300-28ppMatch-

Node

ciscosf300-08_firmwareMatch-

AND

ciscosf300-08Match-

Node

ciscosf300-48p_firmwareMatch-

AND

ciscosf300-48pMatch-

Node

ciscosg300-10mp_firmwareMatch-

AND

ciscosg300-10mpMatch-

Node

ciscosg300-10p_firmwareMatch-

AND

ciscosg300-10pMatch-

Node

ciscosg300-10_firmwareMatch-

AND

ciscosg300-10Match-

Node

ciscosg300-28p_firmwareMatch-

AND

ciscosg300-28pMatch-

Node

ciscosf300-24p_firmwareMatch-

AND

ciscosf300-24pMatch-

Node

ciscosf302-08mp_firmwareMatch-

AND

ciscosf302-08mpMatch-

Node

ciscosg300-28_firmwareMatch-

AND

ciscosg300-28Match-

Node

ciscosf300-48_firmwareMatch-

AND

ciscosf300-48Match-

Node

ciscosg300-20_firmwareMatch-

AND

ciscosg300-20Match-

Node

ciscosf302-08p_firmwareMatch-

AND

ciscosf302-08pMatch-

Node

ciscosg300-52_firmwareMatch-

AND

ciscosg300-52Match-

Node

ciscosf300-24_firmwareMatch-

AND

ciscosf300-24Match-

Node

ciscosf302-08_firmwareMatch-

AND

ciscosf302-08Match-

Node

ciscosf300-24mp_firmwareMatch-

AND

ciscosf300-24mpMatch-

Node

ciscosg300-10sfp_firmwareMatch-

AND

ciscosg300-10sfpMatch-

Node

ciscosg300-28mp_firmwareMatch-

AND

ciscosg300-28mpMatch-

Node

ciscosg300-52p_firmwareMatch-

AND

ciscosg300-52pMatch-

Node

ciscosg300-52mp_firmwareMatch-

AND

ciscosg300-52mpMatch-

Node

ciscosg500-28mpp_firmwareMatch-

AND

ciscosg500-28mppMatch-

Node

ciscosg500-52mp_firmwareMatch-

AND

ciscosg500-52mpMatch-

Node

ciscosg500xg-8f8t_firmwareMatch-

AND

ciscosg500xg-8f8tMatch-

Node

ciscosf500-24_firmwareMatch-

AND

ciscosf500-24Match-

Node

ciscosf500-24p_firmwareMatch-

AND

ciscosf500-24pMatch-

Node

ciscosf500-48_firmwareMatch-

AND

ciscosf500-48Match-

Node

ciscosf500-48p_firmwareMatch-

AND

ciscosf500-48pMatch-

Node

ciscosg500-28_firmwareMatch-

AND

ciscosg500-28Match-

Node

ciscosg500-28p_firmwareMatch-

AND

ciscosg500-28pMatch-

Node

ciscosg500-52_firmwareMatch-

AND

ciscosg500-52Match-

Node

ciscosg500-52p_firmwareMatch-

AND

ciscosg500-52pMatch-

Node

ciscosg500x-24_firmwareMatch-

AND

ciscosg500x-24Match-

Node

ciscosg500x-24p_firmwareMatch-

AND

ciscosg500x-24pMatch-

Node

ciscosg500x-48_firmwareMatch-

AND

ciscosg500x-48Match-

Node

ciscosg500x-48p_firmwareMatch-

AND

ciscosg500x-48pMatch-

CPENameOperatorVersion
cisco:sg250x-24_firmwarecisco sg250x-24 firmwareeq-

CPE	Name	Operator	Version
cisco:sg250x-24_firmware	cisco sg250x-24 firmware	eq	-

CNA Affected

[
  {
    "product": "Cisco Small Business 250 Series Smart Switches Software ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbss-ipv6-dos-3bLk6vA

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

Related for CVE-2020-3363

cvelist1 cisco1 nvd1 prion1 threatpost1