8.6

CVE-2020-3363

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause an unexpected reboot of the switch, leading to a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.

Data is provided by the National Vulnerability Database (NVD)
CiscoSg250x-24 Firmware Version-
   CiscoSg250x-24 Version-
CiscoSg250x-24p Firmware Version-
   CiscoSg250x-24p Version-
CiscoSg250x-48 Firmware Version-
   CiscoSg250x-48 Version-
CiscoSg250x-48p Firmware Version-
   CiscoSg250x-48p Version-
CiscoSg250-08 Firmware Version-
   CiscoSg250-08 Version-
CiscoSg250-08hp Firmware Version-
   CiscoSg250-08hp Version-
CiscoSg250-10p Firmware Version-
   CiscoSg250-10p Version-
CiscoSg250-18 Firmware Version-
   CiscoSg250-18 Version-
CiscoSg250-26 Firmware Version-
   CiscoSg250-26 Version-
CiscoSg250-26hp Firmware Version-
   CiscoSg250-26hp Version-
CiscoSg250-26p Firmware Version-
   CiscoSg250-26p Version-
CiscoSg250-50 Firmware Version-
   CiscoSg250-50 Version-
CiscoSg250-50hp Firmware Version-
   CiscoSg250-50hp Version-
CiscoSg250-50p Firmware Version-
   CiscoSg250-50p Version-
CiscoSf250-24 Firmware Version-
   CiscoSf250-24 Version-
CiscoSf250-24p Firmware Version-
   CiscoSf250-24p Version-
CiscoSf250-48 Firmware Version-
   CiscoSf250-48 Version-
CiscoSf250-48hp Firmware Version-
   CiscoSf250-48hp Version-
CiscoSg350-10 Firmware Version-
   CiscoSg350-10 Version-
CiscoSg350-10p Firmware Version-
   CiscoSg350-10p Version-
CiscoSg350-10mp Firmware Version-
   CiscoSg350-10mp Version-
CiscoSg355-10p Firmware Version-
   CiscoSg355-10p Version-
CiscoSg350-28 Firmware Version-
   CiscoSg350-28 Version-
CiscoSg350-28p Firmware Version-
   CiscoSg350-28p Version-
CiscoSg350-28mp Firmware Version-
   CiscoSg350-28mp Version-
CiscoSf350-48 Firmware Version-
   CiscoSf350-48 Version-
CiscoSf350-48p Firmware Version-
   CiscoSf350-48p Version-
CiscoSf350-48mp Firmware Version-
   CiscoSf350-48mp Version-
CiscoSg350xg-2f10 Firmware Version-
   CiscoSg350xg-2f10 Version-
CiscoSg350xg-24f Firmware Version-
   CiscoSg350xg-24f Version-
CiscoSg350xg-24t Firmware Version-
   CiscoSg350xg-24t Version-
CiscoSg350xg-48t Firmware Version-
   CiscoSg350xg-48t Version-
CiscoSg350x-24 Firmware Version-
   CiscoSg350x-24 Version-
CiscoSg350x-24p Firmware Version-
   CiscoSg350x-24p Version-
CiscoSg350x-24mp Firmware Version-
   CiscoSg350x-24mp Version-
CiscoSg350x-48 Firmware Version-
   CiscoSg350x-48 Version-
CiscoSg350x-48p Firmware Version-
   CiscoSg350x-48p Version-
CiscoSg350x-48mp Firmware Version-
   CiscoSg350x-48mp Version-
CiscoSx550x-16ft Firmware Version-
   CiscoSx550x-16ft Version-
CiscoSx550x-24ft Firmware Version-
   CiscoSx550x-24ft Version-
CiscoSx550x-12f Firmware Version-
   CiscoSx550x-12f Version-
CiscoSx550x-24f Firmware Version-
   CiscoSx550x-24f Version-
CiscoSx550x-24 Firmware Version-
   CiscoSx550x-24 Version-
CiscoSx550x-52 Firmware Version-
   CiscoSx550x-52 Version-
CiscoSg550x-24 Firmware Version-
   CiscoSg550x-24 Version-
CiscoSg550x-24p Firmware Version-
   CiscoSg550x-24p Version-
CiscoSg550x-24mp Firmware Version-
   CiscoSg550x-24mp Version-
CiscoSg550x-24mpp Firmware Version-
   CiscoSg550x-24mpp Version-
CiscoSg550x-48 Firmware Version-
   CiscoSg550x-48 Version-
CiscoSg550x-48p Firmware Version-
   CiscoSg550x-48p Version-
CiscoSg550x-48mp Firmware Version-
   CiscoSg550x-48mp Version-
CiscoSf550x-24 Firmware Version-
   CiscoSf550x-24 Version-
CiscoSf550x-24p Firmware Version-
   CiscoSf550x-24p Version-
CiscoSf550x-24mp Firmware Version-
   CiscoSf550x-24mp Version-
CiscoSf550x-48 Firmware Version-
   CiscoSf550x-48 Version-
CiscoSf550x-48p Firmware Version-
   CiscoSf550x-48p Version-
CiscoSf550x-48mp Firmware Version-
   CiscoSf550x-48mp Version-
CiscoSg200-50 Firmware Version-
   CiscoSg200-50 Version-
CiscoSg200-50p Firmware Version-
   CiscoSg200-50p Version-
CiscoSg200-50fp Firmware Version-
   CiscoSg200-50fp Version-
CiscoSg200-26 Firmware Version-
   CiscoSg200-26 Version-
CiscoSg200-26p Firmware Version-
   CiscoSg200-26p Version-
CiscoSg200-26fp Firmware Version-
   CiscoSg200-26fp Version-
CiscoSg200-18 Firmware Version-
   CiscoSg200-18 Version-
CiscoSg200-10fp Firmware Version-
   CiscoSg200-10fp Version-
CiscoSg200-08 Firmware Version-
   CiscoSg200-08 Version-
CiscoSg200-08p Firmware Version-
   CiscoSg200-08p Version-
CiscoSf200-24 Firmware Version-
   CiscoSf200-24 Version-
CiscoSf200-24p Firmware Version-
   CiscoSf200-24p Version-
CiscoSf200-24fp Firmware Version-
   CiscoSf200-24fp Version-
CiscoSf200-48 Firmware Version-
   CiscoSf200-48 Version-
CiscoSf200-48p Firmware Version-
   CiscoSf200-48p Version-
CiscoSf302-08pp Firmware Version-
   CiscoSf302-08pp Version-
CiscoSf302-08mpp Firmware Version-
   CiscoSf302-08mpp Version-
CiscoSg300-10pp Firmware Version-
   CiscoSg300-10pp Version-
CiscoSg300-10mpp Firmware Version-
   CiscoSg300-10mpp Version-
CiscoSf300-24pp Firmware Version-
   CiscoSf300-24pp Version-
CiscoSf300-48pp Firmware Version-
   CiscoSf300-48pp Version-
CiscoSg300-28pp Firmware Version-
   CiscoSg300-28pp Version-
CiscoSf300-08 Firmware Version-
   CiscoSf300-08 Version-
CiscoSf300-48p Firmware Version-
   CiscoSf300-48p Version-
CiscoSg300-10mp Firmware Version-
   CiscoSg300-10mp Version-
CiscoSg300-10p Firmware Version-
   CiscoSg300-10p Version-
CiscoSg300-10 Firmware Version-
   CiscoSg300-10 Version-
CiscoSg300-28p Firmware Version-
   CiscoSg300-28p Version-
CiscoSf300-24p Firmware Version-
   CiscoSf300-24p Version-
CiscoSf302-08mp Firmware Version-
   CiscoSf302-08mp Version-
CiscoSg300-28 Firmware Version-
   CiscoSg300-28 Version-
CiscoSf300-48 Firmware Version-
   CiscoSf300-48 Version-
CiscoSg300-20 Firmware Version-
   CiscoSg300-20 Version-
CiscoSf302-08p Firmware Version-
   CiscoSf302-08p Version-
CiscoSg300-52 Firmware Version-
   CiscoSg300-52 Version-
CiscoSf300-24 Firmware Version-
   CiscoSf300-24 Version-
CiscoSf302-08 Firmware Version-
   CiscoSf302-08 Version-
CiscoSf300-24mp Firmware Version-
   CiscoSf300-24mp Version-
CiscoSg300-10sfp Firmware Version-
   CiscoSg300-10sfp Version-
CiscoSg300-28mp Firmware Version-
   CiscoSg300-28mp Version-
CiscoSg300-52p Firmware Version-
   CiscoSg300-52p Version-
CiscoSg300-52mp Firmware Version-
   CiscoSg300-52mp Version-
CiscoSg500-28mpp Firmware Version-
   CiscoSg500-28mpp Version-
CiscoSg500-52mp Firmware Version-
   CiscoSg500-52mp Version-
CiscoSg500xg-8f8t Firmware Version-
   CiscoSg500xg-8f8t Version-
CiscoSf500-24 Firmware Version-
   CiscoSf500-24 Version-
CiscoSf500-24p Firmware Version-
   CiscoSf500-24p Version-
CiscoSf500-48 Firmware Version-
   CiscoSf500-48 Version-
CiscoSf500-48p Firmware Version-
   CiscoSf500-48p Version-
CiscoSg500-28 Firmware Version-
   CiscoSg500-28 Version-
CiscoSg500-28p Firmware Version-
   CiscoSg500-28p Version-
CiscoSg500-52 Firmware Version-
   CiscoSg500-52 Version-
CiscoSg500-52p Firmware Version-
   CiscoSg500-52p Version-
CiscoSg500x-24 Firmware Version-
   CiscoSg500x-24 Version-
CiscoSg500x-24p Firmware Version-
   CiscoSg500x-24p Version-
CiscoSg500x-48 Firmware Version-
   CiscoSg500x-48 Version-
CiscoSg500x-48p Firmware Version-
   CiscoSg500x-48p Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.04% 0.754
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
psirt@cisco.com 8.6 3.9 4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.