CVE-2020-3512

Published: Sep 24, 2020Modified: Nov 21, 2024

7.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 4.0

Source: NVD

Description

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of LLDP messages in the PROFINET LLDP message handler. An attacker could exploit this vulnerability by sending a malicious LLDP message to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.

Affected (1)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

1 vulnerable · 131 platform

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 15.2(7)e

Running on/with	Platform Versions
Cisco Catalyst 3650 12x48uq	All versions
Cisco Catalyst 3650 12x48ur	All versions
Cisco Catalyst 3650 12x48uz	All versions
Cisco Catalyst 3650 24pd	All versions
Cisco Catalyst 3650 24pdm	All versions
Cisco Catalyst 3650 48fqm	All versions
Cisco Catalyst 3650 8x24uq	All versions
Cisco Catalyst 3850 24xs	All versions
Cisco Catalyst 3850 48xs	All versions
Cisco Catalyst 3850 Nm 2 40g	All versions
Cisco Catalyst 3850 Nm 8 10g	All versions
Cisco Catalyst C9200 24p	All versions
Cisco Catalyst C9200 24t	All versions
Cisco Catalyst C9200 48p	All versions
Cisco Catalyst C9200 48t	All versions
Cisco Catalyst C9200l 24p 4g	All versions
Cisco Catalyst C9200l 24p 4x	All versions
Cisco Catalyst C9200l 24pxg 2y	All versions
Cisco Catalyst C9200l 24pxg 4x	All versions
Cisco Catalyst C9200l 24t 4g	All versions
Cisco Catalyst C9200l 24t 4x	All versions
Cisco Catalyst C9200l 48p 4g	All versions
Cisco Catalyst C9200l 48p 4x	All versions
Cisco Catalyst C9200l 48pxg 2y	All versions
Cisco Catalyst C9200l 48pxg 4x	All versions
Cisco Catalyst C9200l 48t 4g	All versions
Cisco Catalyst C9200l 48t 4x	All versions
Cisco Catalyst C9300 24p	All versions
Cisco Catalyst C9300 24s	All versions
Cisco Catalyst C9300 24t	All versions
Cisco Catalyst C9300 24u	All versions
Cisco Catalyst C9300 24ux	All versions
Cisco Catalyst C9300 48p	All versions
Cisco Catalyst C9300 48s	All versions
Cisco Catalyst C9300 48t	All versions
Cisco Catalyst C9300 48u	All versions
Cisco Catalyst C9300 48un	All versions
Cisco Catalyst C9300 48uxm	All versions
Cisco Catalyst C9300l 24p 4g	All versions
Cisco Catalyst C9300l 24p 4x	All versions
Cisco Catalyst C9300l 24t 4g	All versions
Cisco Catalyst C9300l 24t 4x	All versions
Cisco Catalyst C9300l 48p 4g	All versions
Cisco Catalyst C9300l 48p 4x	All versions
Cisco Catalyst C9300l 48t 4g	All versions
Cisco Catalyst C9300l 48t 4x	All versions
Cisco Catalyst C9404r	All versions
Cisco Catalyst C9407r	All versions
Cisco Catalyst C9410r	All versions
Cisco Catalyst C9500 12q	All versions
Cisco Catalyst C9500 16x	All versions
Cisco Catalyst C9500 24q	All versions
Cisco Catalyst C9500 24y4c	All versions
Cisco Catalyst C9500 32c	All versions
Cisco Catalyst C9500 32qc	All versions
Cisco Catalyst C9500 40x	All versions
Cisco Catalyst C9500 48y4c	All versions
Cisco Connected Grid Switch 2520	All versions
Cisco Ess 2020	All versions
Cisco Ess 3300	All versions
Cisco Ie 1000	All versions
Cisco Ie 2000u 16tc G	All versions
Cisco Ie 2000u 16tc G X	All versions
Cisco Ie 2000u 16tc Gp	All versions
Cisco Ie 2000u 4s G	All versions
Cisco Ie 2000u 4t Gs	All versions
Cisco Ie 2000u 4ts G	All versions
Cisco Ie 2000u 8tc G	All versions
Cisco Ie 3000	All versions
Cisco Ie 3010 16s 8pc Industrial Ethernet Switch	All versions
Cisco Ie 3010 24tc Industrial Ethernet Switch	All versions
Cisco Ie 3200 8p2s E	All versions
Cisco Ie 3200 8t2s E	All versions
Cisco Ie 3300 8p2s A	All versions
Cisco Ie 3300 8p2s E	All versions
Cisco Ie 3300 8t2s A	All versions
Cisco Ie 3300 8t2s E	All versions
Cisco Ie 3300 8t2x A	All versions
Cisco Ie 3300 8t2x E	All versions
Cisco Ie 3300 8u2x A	All versions
Cisco Ie 3300 8u2x E	All versions
Cisco Ie 3400 8p2s A	All versions
Cisco Ie 3400 8p2s E	All versions
Cisco Ie 3400 8t2s A	All versions
Cisco Ie 3400 8t2s E	All versions
Cisco Ie 4000 16gt4g E	All versions
Cisco Ie 4000 16t4g E	All versions
Cisco Ie 4000 4gc4gp4g E	All versions
Cisco Ie 4000 4gs8gp4g E	All versions
Cisco Ie 4000 4s8p4g E	All versions
Cisco Ie 4000 4t4p4g E	All versions
Cisco Ie 4000 4tc4g E	All versions
Cisco Ie 4000 8gs4g E	All versions
Cisco Ie 4000 8gt4g E	All versions
Cisco Ie 4000 8gt8gp4g E	All versions
Cisco Ie 4000 8s4g E	All versions
Cisco Ie 4000 8t4g E	All versions
Cisco Ie 4010 16s12p Industrial Ethernet Switch	All versions
Cisco Ie 4010 4s24p Industrial Ethernet Switch	All versions
Cisco Ie 5000 12s12p 10g	All versions
Cisco Ie 5000 16s12p	All versions
Cisco Ie 2000 16ptc G Industrial Ethernet Switch	All versions
Cisco Ie 2000 16t67 Industrial Ethernet Switch	All versions
Cisco Ie 2000 16t67p Industrial Ethernet Switch	All versions
Cisco Ie 2000 16tc G E Industrial Ethernet Switch	All versions
Cisco Ie 2000 16tc G N Industrial Ethernet Switch	All versions
Cisco Ie 2000 16tc G X Industrial Ethernet Switch	All versions
Cisco Ie 2000 16tc G Industrial Ethernet Switch	All versions
Cisco Ie 2000 16tc Industrial Ethernet Switch	All versions
Cisco Ie 2000 24t67 Industrial Ethernet Switch	All versions
Cisco Ie 2000 4s Ts G Industrial Ethernet Switch	All versions
Cisco Ie 2000 4t G Industrial Ethernet Switch	All versions
Cisco Ie 2000 4t Industrial Ethernet Switch	All versions
Cisco Ie 2000 4ts G Industrial Ethernet Switch	All versions
Cisco Ie 2000 4ts Industrial Ethernet Switch	All versions
Cisco Ie 2000 8t67 Industrial Ethernet Switch	All versions
Cisco Ie 2000 8t67p Industrial Ethernet Switch	All versions
Cisco Ie 2000 8tc G E Industrial Ethernet Switch	All versions
Cisco Ie 2000 8tc G N Industrial Ethernet Switch	All versions
Cisco Ie 2000 8tc G Industrial Ethernet Switch	All versions
Cisco Iem 3300 14t2s	All versions
Cisco Iem 3300 16p	All versions
Cisco Iem 3300 16t	All versions
Cisco Iem 3300 4mu 2	All versions
Cisco Iem 3300 6t2s	All versions
Cisco Iem 3300 8p	All versions
Cisco Iem 3300 8s	All versions
Cisco Iem 3300 8t	All versions
Cisco Iem 3400 8p	All versions
Cisco Iem 3400 8s	All versions
Cisco Iem 3400 8t	All versions

Related CWEs

CWE-388

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-profinet-dos-65qYG3W5

Source: psirt@cisco.com

Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-profinet-dos-65qYG3W5

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.