6.5

CVE-2020-3465

Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability

A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a device to reload. The vulnerability is due to incorrect handling of certain valid, but not typical, Ethernet frames. An attacker could exploit this vulnerability by sending the Ethernet frames onto the Ethernet segment. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 16.6.9
   Cisco ≫ 1100-4p Version -
   Cisco ≫ 1100-8p Version -
   Cisco ≫ 1100 Terminal Services Gateways Version -
   Cisco ≫ 1101-4p Version -
   Cisco ≫ 1109-2p Version -
   Cisco ≫ 1109-4p Version -
   Cisco ≫ 1111x-8p Version -
   Cisco ≫ 4221 Integrated Services Router Version -
   Cisco ≫ 4331 Integrated Services Router Version -
   Cisco ≫ 4431 Integrated Services Router Version -
   Cisco ≫ 4461 Integrated Services Router Version -
   Cisco ≫ 9800-cl Version -
   Cisco ≫ 9800-l Version -
   Cisco ≫ Csr 1000v Version -
   Cisco ≫ Esr6300 Version -
   Cisco ≫ Ir 1101 Version -
   Cisco ≫ Isrv Version -
   Cisco ≫ Vg400 Version -
Cisco ≫ Ios Xe Version 17.4.1
   Cisco ≫ 1100-4p Version -
   Cisco ≫ 1100-8p Version -
   Cisco ≫ 1100 Terminal Services Gateways Version -
   Cisco ≫ 1101-4p Version -
   Cisco ≫ 1109-2p Version -
   Cisco ≫ 1109-4p Version -
   Cisco ≫ 1111x-8p Version -
   Cisco ≫ 4221 Integrated Services Router Version -
   Cisco ≫ 4331 Integrated Services Router Version -
   Cisco ≫ 4431 Integrated Services Router Version -
   Cisco ≫ 4461 Integrated Services Router Version -
   Cisco ≫ 9800-cl Version -
   Cisco ≫ 9800-l Version -
   Cisco ≫ Csr 1000v Version -
   Cisco ≫ Esr6300 Version -
   Cisco ≫ Ir 1101 Version -
   Cisco ≫ Isrv Version -
   Cisco ≫ Vg400 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.469
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 6.1 6.5 6.9
AV:A/AC:L/Au:N/C:N/I:N/A:C
Cisco PSIRT 7.4 2.8 4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-le-drTOB625
Vendor Advisory