PT-2020-4189 · Cisco · Cisco Ios Xe

Published 2020-09-24 · Updated 2023-05-22 · CVE-2020-3421

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified)

Description: The issue is related to incomplete handling of Layer 4 packets through the device, which could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. An attacker could exploit this by sending a certain sequence of traffic patterns through the device, resulting in a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2020-04611

CVE-2020-3421

Affected Products

Cisco Ios Xe

References · 6

• https://osv.dev/vulnerability/CVE-2020-3421 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-zbfw-94ckG4G · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04611 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-zbfw-94ckG4G · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/657130 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3421 · Security Note