Lucene search

[email protected]NVD:CVE-2020-3465

HistorySep 24, 2020 - 6:15 p.m.

CVE-2020-3465

2020-09-2418:15:19

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios xe

vulnerability

unauthenticated

adjacent attacker

device reload

ethernet frames

exploit

denial of service

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.0%

JSON

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames onto the Ethernet segment. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Affected configurations

Nvd

Node

ciscoios_xeMatch16.6.9

ciscoios_xeMatch17.4.1

AND

cisco1100-4pMatch-

cisco1100-8pMatch-

cisco1100_terminal_services_gatewaysMatch-

cisco1101-4pMatch-

cisco1109-2pMatch-

cisco1109-4pMatch-

cisco1111x-8pMatch-

cisco4221_integrated_services_routerMatch-

cisco4331_integrated_services_routerMatch-

cisco4431_integrated_services_routerMatch-

cisco4461_integrated_services_routerMatch-

cisco9800-clMatch-

cisco9800-lMatch-

ciscocsr_1000vMatch-

ciscoesr6300Match-

ciscoir_1101Match-

ciscoisrvMatch-

ciscovg400Match-

VendorProductVersionCPE
ciscoios_xe16.6.9cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*
ciscoios_xe17.4.1cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*
cisco1100-4p-cpe:2.3:h:cisco:1100-4p:-:*:*:*:*:*:*:*
cisco1100-8p-cpe:2.3:h:cisco:1100-8p:-:*:*:*:*:*:*:*
cisco1100_terminal_services_gateways-cpe:2.3:h:cisco:1100_terminal_services_gateways:-:*:*:*:*:*:*:*
cisco1101-4p-cpe:2.3:h:cisco:1101-4p:-:*:*:*:*:*:*:*
cisco1109-2p-cpe:2.3:h:cisco:1109-2p:-:*:*:*:*:*:*:*
cisco1109-4p-cpe:2.3:h:cisco:1109-4p:-:*:*:*:*:*:*:*
cisco1111x-8p-cpe:2.3:h:cisco:1111x-8p:-:*:*:*:*:*:*:*
cisco4221_integrated_services_router-cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	16.6.9	cpe:2.3:o:cisco:ios_xe:16.6.9:::::::*
cisco	ios_xe	17.4.1	cpe:2.3:o:cisco:ios_xe:17.4.1:::::::*
cisco	1100-4p	-	cpe:2.3:h:cisco:1100-4p:-:::::::*
cisco	1100-8p	-	cpe:2.3:h:cisco:1100-8p:-:::::::*
cisco	1100_terminal_services_gateways	-	cpe:2.3:h:cisco:1100_terminal_services_gateways:-:::::::*
cisco	1101-4p	-	cpe:2.3:h:cisco:1101-4p:-:::::::*
cisco	1109-2p	-	cpe:2.3:h:cisco:1109-2p:-:::::::*
cisco	1109-4p	-	cpe:2.3:h:cisco:1109-4p:-:::::::*
cisco	1111x-8p	-	cpe:2.3:h:cisco:1111x-8p:-:::::::*
cisco	4221_integrated_services_router	-	cpe:2.3:h:cisco:4221_integrated_services_router:-:::::::*

Rows per page:

1-10 of 201

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-le-drTOB625

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.0%

JSON

Related for NVD:CVE-2020-3465

cvelist1 prion1 cve1 cisco1 nessus1