PT-2020-2687 · Cisco · Cisco Ios Xe+1

Published 2020-06-03 · Updated 2020-06-10 · CVE-2020-3200

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS Software (affected versions not specified) Cisco IOS XE Software (affected versions not specified)

Description The issue is related to errors in state management in the Secure Shell (SSH) server code, which could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. This can be achieved by creating an SSH connection to an affected device and using a specific traffic pattern that causes an error condition within that connection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-436

CWE-371

Related Identifiers

BDU:2020-02754

CVE-2020-3200

Affected Products

Cisco Ios

Cisco Ios Xe

References · 6

• https://osv.dev/vulnerability/CVE-2020-3200 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/654299 · Security Note
• https://bdu.fstec.ru/vul/2020-02754 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssh-dos-Un22sd2A · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssh-dos-Un22sd2A · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3200 · Security Note