PT-2020-4425 · Cisco · Cisco Ios Xe

Published 2020-09-24 · Updated 2023-05-22 · CVE-2020-3414

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Cisco 4461 Integrated Services Routers (affected versions not specified)

Description: The issue is related to incorrect processing of IPv4 or IPv6 traffic to or through an affected device, which could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition. An attacker could exploit this by sending IP traffic to or through the device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-19

CWE-400

Related Identifiers

BDU:2020-04954

CVE-2020-3414

Affected Products

Cisco Ios Xe

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISR4461-gKKUROhx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3414 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/657130 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISR4461-gKKUROhx · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04954 · Security Note