CVE-2020-3359

Published: Sep 24, 2020Modified: Dec 19, 2024

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 4.0

Source: NVD

Description

A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device. A successful exploit could cause a device to reload, resulting in a DoS condition.

Affected (1)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

1 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 16.12.1

Running on/with	Platform Versions
Cisco 2610xm	All versions
Cisco 2611xm	All versions
Cisco 2612	All versions
Cisco 2620xm	All versions
Cisco 2621xm	All versions
Cisco 2650xm	All versions
Cisco 2651xm	All versions
Cisco 2691	All versions
Cisco Catalyst 9800 40	All versions
Cisco Catalyst 9800 80	All versions
Cisco Catalyst 9800 Cl	All versions
Cisco Catalyst 9800 L	All versions
Cisco Catalyst 9800 L C	All versions
Cisco Catalyst 9800 L F	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mdns-dos-3tH6cA9J

Source: psirt@cisco.com

Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mdns-dos-3tH6cA9J

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.