CVE-2020-3429

CVE-2020-3429 affects Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family. A vulnerability in WPA2/WPA3 security implementation allows an unauthenticated adjacent attacker to trigger a DoS by sending a crafted authentication packet during the WPA2/WPA3 handshake when 802....

CVE-2020-3465

CVE-2020-3465 affects Cisco IOS XE Software. An unauthenticated, adjacent attacker can trigger a device reload by sending certain valid but atypical Ethernet frames to the Ethernet segment, causing a DoS. The issue stems from incorrect handling of these frames. Cisco provides an advisory and has ...

CVE-2020-3465 Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames on...

CVE-2020-3465 Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames on...

CVE-2020-3474 Cisco IOS XE Software Web Management Framework Vulnerabilities

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service DoS...

CVE-2020-3474 Cisco IOS XE Software Web Management Framework Vulnerabilities

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service DoS...

CVE-2020-3474

Cisco IOS XE Software Web Management Framework has multiple CVE-2020-3474 vulnerabilities allowing an authenticated, read-only user to gain unauthorized data access or trigger DoS by hanging/crashing the web management interface. Vendors report that updates/patches are available to address the is...

CVE-2020-3475 Cisco IOS XE Software Web Management Framework Vulnerabilities

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service DoS...

CVE-2020-3475

Cisco IOS XE Software Web Management Framework has multiple vulnerabilities that can allow an authenticated, remote attacker with read-only privileges to read sensitive data or cause the web UI to hang/crash, yielding DoS. Affected component is the web management framework (Web UI) within Cisco I...

CVE-2020-3476 Cisco IOS XE Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The vulnerability is due to insufficient validation of the parameters of a specific CLI command. A...

CVE-2020-3476

CVE-2020-3476 affects Cisco IOS XE Software. A vulnerability in the CLI implementation of a specific command allows an authenticated, local attacker to overwrite arbitrary files on the underlying host filesystem due to insufficient validation of command parameters. Exploitation requires issuing t...

CVE-2020-3476 Cisco IOS XE Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The vulnerability is due to insufficient validation of the parameters of a specific CLI command. A...

CVE-2020-3477

CVE-2020-3477 affects Cisco IOS and IOS XE CLI parser. An authenticated, local attacker could obtain read-only access to files on the flash: filesystem due to insufficient command restrictions. Exploitation is local with no user interaction beyond authentication. Cisco’s advisory and related Ness...

CVE-2020-3479 Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability

A vulnerability in the implementation of Multiprotocol Border Gateway Protocol MP-BGP for the Layer 2 VPN L2VPN Ethernet VPN EVPN address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The...

CVE-2020-3479

CVE-2020-3479 affects Cisco IOS and IOS XE MP-BGP EVPN. Root cause: incorrect processing of BGP update messages containing crafted EVPN attributes, leading to a DoS via device crash. Impact: unauthenticated remote DoS condition. Exploitation: possible by sending specific malformed BGP updates to ...

CVE-2020-3480

CVE-2020-3480 corresponds to multiple DoS vulnerabilities in Cisco IOS XE Zone-Based Firewall. The flaws arise from incomplete handling of Layer 4 packets, enabling an unauthenticated, remote attacker to trigger a device reload or to stop forwarding traffic through the firewall by sending a speci...

CVE-2020-3480 Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities

Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the...

CVE-2020-3486 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

CVE-2020-3486

Cisco IOS XE Software for the Catalyst 9000 Family CAPWAP Denial of Service vulnerabilities (CVE-2020-3486 and related CVEs) affect the CAPWAP processing in Catalyst 9800 Series Wireless Controllers. Affected component: CAPWAP packet handling; root cause: insufficient validation of CAPWAP packets...

CVE-2020-3487 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...