Lucene search

[email protected]CVE-2020-3465

HistorySep 24, 2020 - 6:15 p.m.

CVE-2020-3465

2020-09-2418:15:19

CWE-20

[email protected]

web.nvd.nist.gov

cisco

ios xe software

vulnerability

adjacent attacker

reload

denial of service

nvd

cve-2020-3465

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames onto the Ethernet segment. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Affected configurations

NVD

Node

ciscoios_xeMatch16.6.9

ciscoios_xeMatch17.4.1

AND

cisco1100-4pMatch-

cisco1100-8pMatch-

cisco1100_terminal_services_gatewaysMatch-

cisco1101-4pMatch-

cisco1109-2pMatch-

cisco1109-4pMatch-

cisco1111x-8pMatch-

cisco4221_integrated_services_routerMatch-

cisco4331_integrated_services_routerMatch-

cisco4431_integrated_services_routerMatch-

cisco4461_integrated_services_routerMatch-

cisco9800-clMatch-

cisco9800-lMatch-

ciscocsr_1000vMatch-

ciscoesr6300Match-

ciscoir_1101Match-

ciscoisrvMatch-

ciscovg400Match-

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq16.6.9
cisco:ios_xecisco ios xeeq17.4.1

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	16.6.9
cisco:ios_xe	cisco ios xe	eq	17.4.1

CNA Affected

[
  {
    "product": "Cisco IOS XE Software 16.8.1",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-le-drTOB625

Social References

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2020-3465

cvelist1 prion1 nessus1 nvd1 cisco1