PT-2020-2879 · Cisco · Cisco Ios Xe

Published 2020-06-03 · Updated 2020-06-10 · CVE-2020-3220

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers (affected versions not specified)

Description A vulnerability in the hardware crypto driver could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The issue is due to insufficient verification of the authenticity of received Encapsulating Security Payload (ESP) packets. An attacker could exploit this by tampering with ESP cleartext values as a man-in-the-middle.

Recommendations For Cisco IOS XE Software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vulnerable hardware crypto driver until a patch is available. Avoid using the ESP packets in a way that could be exploited by an attacker until the issue is resolved. At the moment, there is no information about specific versions that contain a fix for this vulnerability, but Cisco has released software updates that address this issue.

Fix

DoS

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2020-03036

CVE-2020-3220

Affected Products

Cisco Ios Xe

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-vpn-dos-edOmW28Z · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3220 · Security Note
• https://bdu.fstec.ru/vul/2020-03036 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-vpn-dos-edOmW28Z · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3220 · Vendor Advisory