CVE-2020-3226: Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability
Published Jun 3, 2020
·Updated
A vulnerability in the Session Initiation Protocol (SIP) library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient sanity checks on received SIP messages. An attacker could exploit this vulnerability by sending crafted SIP messages to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service condition.
Affected Software
260 affected components
cisco IOS=15.0\(2\)sg11a
cisco IOS=15.3\(3\)jaa1
cisco IOS=15.3\(3\)jpi
cisco IOS=15.3\(3\)jpj
cisco IOS=15.3\(3\)m
cisco IOS=15.3\(3\)m1
cisco IOS=15.3\(3\)m2
cisco IOS=15.3\(3\)m3
cisco IOS=15.3\(3\)m4
cisco IOS=15.3\(3\)m5
cisco IOS=15.3\(3\)m6
cisco IOS=15.3\(3\)m7
cisco IOS=15.3\(3\)m8
cisco IOS=15.3\(3\)m8a
cisco IOS=15.3\(3\)m9
cisco IOS=15.3\(3\)m10
cisco IOS=15.3\(3\)xb12
cisco IOS=15.4\(1\)cg
cisco IOS=15.4\(1\)t
cisco IOS=15.4\(1\)t1
cisco IOS=15.4\(1\)t2
cisco IOS=15.4\(1\)t3
cisco IOS=15.4\(1\)t4
cisco IOS=15.4\(2\)cg
cisco IOS=15.4\(2\)t
cisco IOS=15.4\(2\)t1
cisco IOS=15.4\(2\)t2
cisco IOS=15.4\(2\)t3
cisco IOS=15.4\(2\)t4
cisco IOS=15.4\(3\)m
cisco IOS=15.4\(3\)m1
cisco IOS=15.4\(3\)m2
cisco IOS=15.4\(3\)m3
cisco IOS=15.4\(3\)m4
cisco IOS=15.4\(3\)m5
cisco IOS=15.4\(3\)m6
cisco IOS=15.4\(3\)m6a
cisco IOS=15.4\(3\)m7
cisco IOS=15.4\(3\)m7a
cisco IOS=15.4\(3\)m8
cisco IOS=15.4\(3\)m9
cisco IOS=15.4\(3\)m10
cisco IOS=15.5\(1\)t
cisco IOS=15.5\(1\)t1
cisco IOS=15.5\(1\)t2
cisco IOS=15.5\(1\)t3
cisco IOS=15.5\(1\)t4
cisco IOS=15.5\(2\)t
cisco IOS=15.5\(2\)t1
cisco IOS=15.5\(2\)t2
cisco IOS=15.5\(2\)t3
cisco IOS=15.5\(2\)t4
cisco IOS=15.5\(2\)xb
cisco IOS=15.5\(3\)m
cisco IOS=15.5\(3\)m1
cisco IOS=15.5\(3\)m2
cisco IOS=15.5\(3\)m2a
cisco IOS=15.5\(3\)m3
cisco IOS=15.5\(3\)m4
cisco IOS=15.5\(3\)m4a
cisco IOS=15.5\(3\)m4b
cisco IOS=15.5\(3\)m4c
cisco IOS=15.5\(3\)m5
cisco IOS=15.5\(3\)m6
cisco IOS=15.5\(3\)m6a
cisco IOS=15.5\(3\)m7
cisco IOS=15.5\(3\)m8
cisco IOS=15.5\(3\)m9
cisco IOS=15.5\(3\)m10
cisco IOS=15.6\(1\)t
cisco IOS=15.6\(1\)t0a
cisco IOS=15.6\(1\)t1
cisco IOS=15.6\(1\)t2
cisco IOS=15.6\(1\)t3
cisco IOS=15.6\(2\)t
cisco IOS=15.6\(2\)t1
cisco IOS=15.6\(2\)t2
cisco IOS=15.6\(2\)t3
cisco IOS=15.6\(3\)m
cisco IOS=15.6\(3\)m0a
cisco IOS=15.6\(3\)m1
cisco IOS=15.6\(3\)m1a
cisco IOS=15.6\(3\)m1b
cisco IOS=15.6\(3\)m2
cisco IOS=15.6\(3\)m2a
cisco IOS=15.6\(3\)m3
cisco IOS=15.6\(3\)m3a
cisco IOS=15.6\(3\)m4
cisco IOS=15.6\(3\)m5
cisco IOS=15.6\(3\)m6
cisco IOS=15.6\(3\)m6a
cisco IOS=15.6\(3\)m7
cisco IOS=15.7\(3\)m
cisco IOS=15.7\(3\)m1
cisco IOS=15.7\(3\)m2
cisco IOS=15.7\(3\)m3
cisco IOS=15.7\(3\)m4
cisco IOS=15.7\(3\)m4a
cisco IOS=15.7\(3\)m4b
cisco IOS=15.8\(3\)m
cisco IOS=15.8\(3\)m0a
cisco IOS=15.8\(3\)m1
cisco IOS=15.8\(3\)m2
Cisco IOS XE=3.10.0s
Cisco IOS XE=3.10.1s
Cisco IOS XE=3.10.2as
Cisco IOS XE=3.10.2s
Cisco IOS XE=3.10.2ts
Cisco IOS XE=3.10.3s
Cisco IOS XE=3.10.4s
Cisco IOS XE=3.10.5s
Cisco IOS XE=3.10.6s
Cisco IOS XE=3.10.7s
Cisco IOS XE=3.10.8as
Cisco IOS XE=3.10.8s
Cisco IOS XE=3.10.9s
Cisco IOS XE=3.10.10s
Cisco IOS XE=3.11.0s
Cisco IOS XE=3.11.1s
Cisco IOS XE=3.11.2s
Cisco IOS XE=3.11.3s
Cisco IOS XE=3.11.4s
Cisco IOS XE=3.12.0as
Cisco IOS XE=3.12.0s
Cisco IOS XE=3.12.1s
Cisco IOS XE=3.12.2s
Cisco IOS XE=3.12.3s
Cisco IOS XE=3.12.4s
Cisco IOS XE=3.13.0s
Cisco IOS XE=3.13.1s
Cisco IOS XE=3.13.2as
Cisco IOS XE=3.13.2s
Cisco IOS XE=3.13.3s
Cisco IOS XE=3.13.4s
Cisco IOS XE=3.13.5as
Cisco IOS XE=3.13.5s
Cisco IOS XE=3.13.6as
Cisco IOS XE=3.13.6bs
Cisco IOS XE=3.13.6s
Cisco IOS XE=3.13.7as
Cisco IOS XE=3.13.7s
Cisco IOS XE=3.13.8s
Cisco IOS XE=3.13.9s
Cisco IOS XE=3.13.10s
Cisco IOS XE=3.14.0s
Cisco IOS XE=3.14.1s
Cisco IOS XE=3.14.2s
Cisco IOS XE=3.14.3s
Cisco IOS XE=3.14.4s
Cisco IOS XE=3.15.0s
Cisco IOS XE=3.15.1cs
Cisco IOS XE=3.15.1s
Cisco IOS XE=3.15.2s
Cisco IOS XE=3.15.3s
Cisco IOS XE=3.15.4s
Cisco IOS XE=3.16.0cs
Cisco IOS XE=3.16.0s
Cisco IOS XE=3.16.1as
Cisco IOS XE=3.16.1s
Cisco IOS XE=3.16.2bs
Cisco IOS XE=3.16.2s
Cisco IOS XE=3.16.3s
Cisco IOS XE=3.16.4as
Cisco IOS XE=3.16.4bs
Cisco IOS XE=3.16.4cs
Cisco IOS XE=3.16.4ds
Cisco IOS XE=3.16.4es
Cisco IOS XE=3.16.4gs
Cisco IOS XE=3.16.5as
Cisco IOS XE=3.16.5bs
Cisco IOS XE=3.16.5s
Cisco IOS XE=3.16.6bs
Cisco IOS XE=3.16.6s
Cisco IOS XE=3.16.7as
Cisco IOS XE=3.16.7bs
Cisco IOS XE=3.16.7s
Cisco IOS XE=3.16.8s
Cisco IOS XE=3.16.9s
Cisco IOS XE=3.16.10s
Cisco IOS XE=3.17.0s
Cisco IOS XE=3.17.1as
Cisco IOS XE=3.17.1s
Cisco IOS XE=3.17.2s
Cisco IOS XE=3.17.3s
Cisco IOS XE=3.17.4s
Cisco IOS XE=3.18.0as
Cisco IOS XE=3.18.1asp
Cisco IOS XE=3.18.1sp
Cisco IOS XE=3.18.2asp
Cisco IOS XE=3.18.3asp
Cisco IOS XE=3.18.3bsp
Cisco IOS XE=3.18.3sp
Cisco IOS XE=3.18.4sp
Cisco IOS XE=3.18.5sp
Cisco IOS XE=3.18.6sp
Cisco IOS XE=16.2.1
Cisco IOS XE=16.2.2
Cisco IOS XE=16.3.1
Cisco IOS XE=16.3.1a
Cisco IOS XE=16.3.2
Cisco IOS XE=16.3.3
Cisco IOS XE=16.3.4
Cisco IOS XE=16.3.5
Cisco IOS XE=16.3.6
Cisco IOS XE=16.3.7
Cisco IOS XE=16.3.8
Cisco IOS XE=16.3.9
Cisco IOS XE=16.4.1
Cisco IOS XE=16.4.2
Cisco IOS XE=16.4.3
Cisco IOS XE=16.5.1
Cisco IOS XE=16.5.1b
Cisco IOS XE=16.5.2
Cisco IOS XE=16.5.3
Cisco IOS XE=16.6.1
Cisco IOS XE=16.6.2
Cisco IOS XE=16.6.3
Cisco IOS XE=16.6.4
Cisco IOS XE=16.6.4s
Cisco IOS XE=16.6.5
Cisco IOS XE=16.6.5b
Cisco IOS XE=16.6.6
Cisco IOS XE=16.7.1
Cisco IOS XE=16.7.1a
Cisco IOS XE=16.7.1b
Cisco IOS XE=16.7.2
Cisco IOS XE=16.7.3
Cisco IOS XE=16.7.4
Cisco IOS XE=16.8.1
Cisco IOS XE=16.8.1a
Cisco IOS XE=16.8.1c
Cisco IOS XE=16.8.1d
Cisco IOS XE=16.8.1e
Cisco IOS XE=16.8.1s
Cisco IOS XE=16.8.2
Cisco IOS XE=16.8.3
Cisco IOS XE=16.9.1
Cisco IOS XE=16.9.1a
Cisco IOS XE=16.9.1s
Cisco IOS XE=16.9.2
Cisco IOS XE=16.9.2s
Cisco IOS XE=16.9.3
Cisco IOS XE=16.9.3s
Cisco IOS XE=16.9.4
Cisco IOS XE=16.10.1
Cisco IOS XE=16.10.1a
Cisco IOS XE=16.10.1b
Cisco IOS XE=16.10.1c
Cisco IOS XE=16.10.1d
Cisco IOS XE=16.10.1e
Cisco IOS XE=16.10.1f
Cisco IOS XE=16.10.1g
Cisco IOS XE=16.10.1s
Cisco IOS XE=16.10.2
Cisco IOS XE=16.11.1
Cisco IOS XE=16.11.1a
Cisco IOS XE=16.11.1b
Cisco IOS XE=16.11.1c
Cisco IOS XE=16.11.1s
Cisco IOS XE=16.12.1y
Event History
Jun 3, 2020
CVE Published
via MITRE·05:42 PM
Data Sourced
via MITRE·05:42 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-3226?
The severity of CVE-2020-3226 is classified as high due to its potential to cause a denial of service (DoS) condition.
2
How do I fix CVE-2020-3226?
To fix CVE-2020-3226, upgrade your Cisco IOS Software or Cisco IOS XE Software to a version that addresses the vulnerability.
3
Which versions of Cisco IOS are affected by CVE-2020-3226?
CVE-2020-3226 affects multiple versions of Cisco IOS, including versions 15.0(2)sg11a and 15.3(3) and later.
4
Can CVE-2020-3226 be exploited remotely?
Yes, CVE-2020-3226 can be exploited by an unauthenticated, remote attacker.
5
What impact does CVE-2020-3226 have on affected devices?
The impact of CVE-2020-3226 is a denial of service (DoS), which may cause devices to reload, affecting network availability.