Lucene search

CiscoCVE-2020-3465

HistorySep 24, 2020 - 6:15 p.m.

CVE-2020-3465

2020-09-2418:15:19

CWE-20

cisco

web.nvd.nist.gov

cisco

ios xe software

vulnerability

adjacent attacker

reload

denial of service

nvd

cve-2020-3465

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames onto the Ethernet segment. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Affected configurations

Nvd

Node

ciscoios_xeMatch16.6.9

ciscoios_xeMatch17.4.1

AND

cisco1100-4pMatch-

cisco1100-8pMatch-

cisco1100_terminal_services_gatewaysMatch-

cisco1101-4pMatch-

cisco1109-2pMatch-

cisco1109-4pMatch-

cisco1111x-8pMatch-

cisco4221_integrated_services_routerMatch-

cisco4331_integrated_services_routerMatch-

cisco4431_integrated_services_routerMatch-

cisco4461_integrated_services_routerMatch-

cisco9800-clMatch-

cisco9800-lMatch-

ciscocsr_1000vMatch-

ciscoesr6300Match-

ciscoir_1101Match-

ciscoisrvMatch-

ciscovg400Match-

VendorProductVersionCPE
ciscoios_xe16.6.9cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*
ciscoios_xe17.4.1cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*
cisco1100-4p-cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*
cisco1100-8p-cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*
cisco1100_terminal_services_gateways-cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*
cisco1101-4p-cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*
cisco1109-2p-cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*
cisco1109-4p-cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*
cisco1111x-8p-cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*
cisco4221_integrated_services_router-cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	16.6.9	cpe:2.3:o:cisco:ios_xe:16.6.9:::::::*
cisco	ios_xe	17.4.1	cpe:2.3:o:cisco:ios_xe:17.4.1:::::::*
cisco	1100-4p	-	cpe:2.3:h:cisco:1100-4p:-:::::::*
cisco	1100-8p	-	cpe:2.3:h:cisco:1100-8p:-:::::::*
cisco	1100_terminal_services_gateways	-	cpe:2.3:h:cisco:1100_terminal_services_gateways:-:::::::*
cisco	1101-4p	-	cpe:2.3:h:cisco:1101-4p:-:::::::*
cisco	1109-2p	-	cpe:2.3:h:cisco:1109-2p:-:::::::*
cisco	1109-4p	-	cpe:2.3:h:cisco:1109-4p:-:::::::*
cisco	1111x-8p	-	cpe:2.3:h:cisco:1111x-8p:-:::::::*
cisco	4221_integrated_services_router	-	cpe:2.3:h:cisco:4221_integrated_services_router:-:::::::*

Rows per page:

1-10 of 201

CNA Affected

[
  {
    "product": "Cisco IOS XE Software 16.8.1",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-le-drTOB625

Social References

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

25.0%

JSON

Related for CVE-2020-3465