CVE-2020-3228: Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability

Published Jun 3, 2020
·
Updated

A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because crafted SXP packets are mishandled. An attacker could exploit this vulnerability by sending specifically crafted SXP packets to the affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected Software

490 affected components
cisco IOS=12.2\(6\)i1
cisco IOS=15.1\(1\)sy
cisco IOS=15.1\(1\)sy1
cisco IOS=15.1\(1\)sy2
cisco IOS=15.1\(1\)sy3
cisco IOS=15.1\(1\)sy4
cisco IOS=15.1\(1\)sy5
cisco IOS=15.1\(1\)sy6
cisco IOS=15.1\(2\)sy
cisco IOS=15.1\(2\)sy1
cisco IOS=15.1\(2\)sy2
cisco IOS=15.1\(2\)sy3
cisco IOS=15.1\(2\)sy4
cisco IOS=15.1\(2\)sy4a
cisco IOS=15.1\(2\)sy5
cisco IOS=15.1\(2\)sy6
cisco IOS=15.1\(2\)sy7
cisco IOS=15.1\(2\)sy8
cisco IOS=15.1\(2\)sy9
cisco IOS=15.1\(2\)sy10
cisco IOS=15.1\(2\)sy11
cisco IOS=15.1\(2\)sy12
cisco IOS=15.1\(2\)sy13
cisco IOS=15.1\(2\)sy14
cisco IOS=15.2\(1\)e
cisco IOS=15.2\(1\)e1
cisco IOS=15.2\(1\)e2
cisco IOS=15.2\(1\)e3
cisco IOS=15.2\(1\)ey
cisco IOS=15.2\(1\)sy
cisco IOS=15.2\(1\)sy0a
cisco IOS=15.2\(1\)sy1
cisco IOS=15.2\(1\)sy1a
cisco IOS=15.2\(1\)sy2
cisco IOS=15.2\(1\)sy3
cisco IOS=15.2\(1\)sy4
cisco IOS=15.2\(1\)sy5
cisco IOS=15.2\(1\)sy6
cisco IOS=15.2\(1\)sy7
cisco IOS=15.2\(1\)sy8
cisco IOS=15.2\(2\)e
cisco IOS=15.2\(2\)e1
cisco IOS=15.2\(2\)e2
cisco IOS=15.2\(2\)e3
cisco IOS=15.2\(2\)e4
cisco IOS=15.2\(2\)e5
cisco IOS=15.2\(2\)e5a
cisco IOS=15.2\(2\)e5b
cisco IOS=15.2\(2\)e6
cisco IOS=15.2\(2\)e7
cisco IOS=15.2\(2\)e7b
cisco IOS=15.2\(2\)e8
cisco IOS=15.2\(2\)e9
cisco IOS=15.2\(2\)e9a
cisco IOS=15.2\(2\)e10
cisco IOS=15.2\(2\)ea
cisco IOS=15.2\(2\)ea1
cisco IOS=15.2\(2\)ea2
cisco IOS=15.2\(2\)ea3
cisco IOS=15.2\(2\)eb
cisco IOS=15.2\(2\)eb1
cisco IOS=15.2\(2\)eb2
cisco IOS=15.2\(2\)sy
cisco IOS=15.2\(2\)sy1
cisco IOS=15.2\(2\)sy2
cisco IOS=15.2\(2\)sy3
cisco IOS=15.2\(2a\)e1
cisco IOS=15.2\(2a\)e2
cisco IOS=15.2\(2b\)e
cisco IOS=15.2\(3\)e
cisco IOS=15.2\(3\)e1
cisco IOS=15.2\(3\)e2
cisco IOS=15.2\(3\)e3
cisco IOS=15.2\(3\)e4
cisco IOS=15.2\(3\)e5
cisco IOS=15.2\(3\)ea
cisco IOS=15.2\(3a\)e
cisco IOS=15.2\(3m\)e2
cisco IOS=15.2\(3m\)e7
cisco IOS=15.2\(3m\)e8
cisco IOS=15.2\(4\)e
cisco IOS=15.2\(4\)e1
cisco IOS=15.2\(4\)e2
cisco IOS=15.2\(4\)e3
cisco IOS=15.2\(4\)e4
cisco IOS=15.2\(4\)e5
cisco IOS=15.2\(4\)e5a
cisco IOS=15.2\(4\)e6
cisco IOS=15.2\(4\)e7
cisco IOS=15.2\(4\)e8
cisco IOS=15.2\(4\)ea
cisco IOS=15.2\(4\)ea1
cisco IOS=15.2\(4\)ea2
cisco IOS=15.2\(4\)ea3
cisco IOS=15.2\(4\)ea4
cisco IOS=15.2\(4\)ea5
cisco IOS=15.2\(4\)ea6
cisco IOS=15.2\(4\)ea7
cisco IOS=15.2\(4\)ea8
cisco IOS=15.2\(4\)ea9
cisco IOS=15.2\(4\)ec1
cisco IOS=15.2\(4\)ec2
cisco IOS=15.2\(4m\)e1
cisco IOS=15.2\(4m\)e2
cisco IOS=15.2\(4m\)e3
cisco IOS=15.2\(4n\)e2
cisco IOS=15.2\(4o\)e2
cisco IOS=15.2\(4o\)e3
cisco IOS=15.2\(4p\)e1
cisco IOS=15.2\(4q\)e1
cisco IOS=15.2\(4s\)e1
cisco IOS=15.2\(5\)e
cisco IOS=15.2\(5\)e1
cisco IOS=15.2\(5\)e2
cisco IOS=15.2\(5\)e2b
cisco IOS=15.2\(5\)e2c
cisco IOS=15.2\(5\)ea
cisco IOS=15.2\(5a\)e1
cisco IOS=15.2\(5b\)e
cisco IOS=15.2\(6\)e
cisco IOS=15.2\(6\)e0a
cisco IOS=15.2\(6\)e0c
cisco IOS=15.2\(6\)e1
cisco IOS=15.2\(6\)e1a
cisco IOS=15.2\(6\)e1s
cisco IOS=15.2\(6\)e2
cisco IOS=15.2\(6\)e2a
cisco IOS=15.2\(6\)e3
cisco IOS=15.2\(6\)e4
cisco IOS=15.2\(6\)eb
cisco IOS=15.2\(7\)e
cisco IOS=15.2\(7\)e0a
cisco IOS=15.2\(7\)e0b
cisco IOS=15.2\(7\)e0s
cisco IOS=15.3\(0\)sy
cisco IOS=15.3\(1\)sy
cisco IOS=15.3\(1\)sy1
cisco IOS=15.3\(1\)sy2
cisco IOS=15.3\(2\)t
cisco IOS=15.3\(2\)t1
cisco IOS=15.3\(2\)t2
cisco IOS=15.3\(2\)t3
cisco IOS=15.3\(2\)t4
cisco IOS=15.3\(3\)jaa1
cisco IOS=15.3\(3\)jpi
cisco IOS=15.3\(3\)jpj
cisco IOS=15.3\(3\)m
cisco IOS=15.3\(3\)m1
cisco IOS=15.3\(3\)m2
cisco IOS=15.3\(3\)m3
cisco IOS=15.3\(3\)m4
cisco IOS=15.3\(3\)m5
cisco IOS=15.3\(3\)m6
cisco IOS=15.3\(3\)m7
cisco IOS=15.3\(3\)m8
cisco IOS=15.3\(3\)m8a
cisco IOS=15.3\(3\)m9
cisco IOS=15.3\(3\)m10
cisco IOS=15.3\(3\)xb12
cisco IOS=15.4\(1\)cg1
cisco IOS=15.4\(1\)sy
cisco IOS=15.4\(1\)sy1
cisco IOS=15.4\(1\)sy2
cisco IOS=15.4\(1\)sy3
cisco IOS=15.4\(1\)sy4
cisco IOS=15.4\(1\)t
cisco IOS=15.4\(1\)t1
cisco IOS=15.4\(1\)t2
cisco IOS=15.4\(1\)t3
cisco IOS=15.4\(1\)t4
cisco IOS=15.4\(2\)t
cisco IOS=15.4\(2\)t1
cisco IOS=15.4\(2\)t2
cisco IOS=15.4\(2\)t3
cisco IOS=15.4\(2\)t4
cisco IOS=15.4\(3\)m
cisco IOS=15.4\(3\)m1
cisco IOS=15.4\(3\)m2
cisco IOS=15.4\(3\)m3
cisco IOS=15.4\(3\)m4
cisco IOS=15.4\(3\)m5
cisco IOS=15.4\(3\)m6
cisco IOS=15.4\(3\)m6a
cisco IOS=15.4\(3\)m7
cisco IOS=15.4\(3\)m7a
cisco IOS=15.4\(3\)m8
cisco IOS=15.4\(3\)m9
cisco IOS=15.4\(3\)m10
cisco IOS=15.5\(1\)sy
cisco IOS=15.5\(1\)sy1
cisco IOS=15.5\(1\)sy2
cisco IOS=15.5\(1\)sy3
cisco IOS=15.5\(1\)t
cisco IOS=15.5\(1\)t1
cisco IOS=15.5\(1\)t2
cisco IOS=15.5\(1\)t3
cisco IOS=15.5\(1\)t4
cisco IOS=15.5\(2\)t
cisco IOS=15.5\(2\)t1
cisco IOS=15.5\(2\)t2
cisco IOS=15.5\(2\)t3
cisco IOS=15.5\(2\)t4
cisco IOS=15.5\(2\)xb
cisco IOS=15.5\(3\)m
cisco IOS=15.5\(3\)m1
cisco IOS=15.5\(3\)m2
cisco IOS=15.5\(3\)m2a
cisco IOS=15.5\(3\)m3
cisco IOS=15.5\(3\)m4
cisco IOS=15.5\(3\)m4a
cisco IOS=15.5\(3\)m4b
cisco IOS=15.5\(3\)m4c
cisco IOS=15.5\(3\)m5
cisco IOS=15.5\(3\)m6
cisco IOS=15.5\(3\)m6a
cisco IOS=15.5\(3\)m7
cisco IOS=15.5\(3\)m8
cisco IOS=15.5\(3\)m9
cisco IOS=15.6\(1\)t
cisco IOS=15.6\(1\)t0a
cisco IOS=15.6\(1\)t1
cisco IOS=15.6\(1\)t2
cisco IOS=15.6\(1\)t3
cisco IOS=15.6\(2\)t
cisco IOS=15.6\(2\)t0a
cisco IOS=15.6\(2\)t1
cisco IOS=15.6\(2\)t2
cisco IOS=15.6\(2\)t3
cisco IOS=15.6\(3\)m
cisco IOS=15.6\(3\)m0a
cisco IOS=15.6\(3\)m1
cisco IOS=15.6\(3\)m1a
cisco IOS=15.6\(3\)m2
cisco IOS=15.6\(3\)m2a
cisco IOS=15.6\(3\)m3
cisco IOS=15.6\(3\)m3a
cisco IOS=15.6\(3\)m4
cisco IOS=15.6\(3\)m5
cisco IOS=15.6\(3\)m6
cisco IOS=15.6\(3\)m6a
cisco IOS=15.7\(3\)m
cisco IOS=15.7\(3\)m0a
cisco IOS=15.7\(3\)m1
cisco IOS=15.7\(3\)m2
cisco IOS=15.7\(3\)m3
cisco IOS=15.7\(3\)m4
cisco IOS=15.7\(3\)m4a
cisco IOS=15.7\(3\)m4b
cisco IOS=15.8\(3\)m
cisco IOS=15.8\(3\)m0a
cisco IOS=15.8\(3\)m0b
cisco IOS=15.8\(3\)m1
cisco IOS=15.8\(3\)m1a
cisco IOS=15.8\(3\)m2
cisco IOS=15.8\(3\)m3
cisco IOS=15.9\(3\)m
cisco IOS=15.9\(3\)m0a
Cisco IOS XE=3.3.0se
Cisco IOS XE=3.3.0xo
Cisco IOS XE=3.3.1se
Cisco IOS XE=3.3.1xo
Cisco IOS XE=3.3.2se
Cisco IOS XE=3.3.2xo
Cisco IOS XE=3.3.3se
Cisco IOS XE=3.3.4se
Cisco IOS XE=3.3.5se
Cisco IOS XE=3.5.0e
Cisco IOS XE=3.5.1e
Cisco IOS XE=3.5.2e
Cisco IOS XE=3.5.3e
Cisco IOS XE=3.6.0ae
Cisco IOS XE=3.6.0be
Cisco IOS XE=3.6.0e
Cisco IOS XE=3.6.1e
Cisco IOS XE=3.6.2ae
Cisco IOS XE=3.6.3e
Cisco IOS XE=3.6.4e
Cisco IOS XE=3.6.5ae
Cisco IOS XE=3.6.5be
Cisco IOS XE=3.6.5e
Cisco IOS XE=3.6.6e
Cisco IOS XE=3.6.7ae
Cisco IOS XE=3.6.7be
Cisco IOS XE=3.6.7e
Cisco IOS XE=3.6.8e
Cisco IOS XE=3.6.9ae
Cisco IOS XE=3.6.9e
Cisco IOS XE=3.6.10e
Cisco IOS XE=3.7.0e
Cisco IOS XE=3.7.1e
Cisco IOS XE=3.7.2e
Cisco IOS XE=3.7.3e
Cisco IOS XE=3.7.4e
Cisco IOS XE=3.7.5e
Cisco IOS XE=3.8.0e
Cisco IOS XE=3.8.1e
Cisco IOS XE=3.8.2e
Cisco IOS XE=3.8.3e
Cisco IOS XE=3.8.4e
Cisco IOS XE=3.8.5ae
Cisco IOS XE=3.8.5e
Cisco IOS XE=3.8.6e
Cisco IOS XE=3.8.7e
Cisco IOS XE=3.8.8e
Cisco IOS XE=3.9.0as
Cisco IOS XE=3.9.0e
Cisco IOS XE=3.9.0s
Cisco IOS XE=3.9.1e
Cisco IOS XE=3.9.1s
Cisco IOS XE=3.9.2be
Cisco IOS XE=3.9.2e
Cisco IOS XE=3.9.2s
Cisco IOS XE=3.10.0ce
Cisco IOS XE=3.10.0e
Cisco IOS XE=3.10.0s
Cisco IOS XE=3.10.1ae
Cisco IOS XE=3.10.1e
Cisco IOS XE=3.10.1s
Cisco IOS XE=3.10.1se
Cisco IOS XE=3.10.2as
Cisco IOS XE=3.10.2e
Cisco IOS XE=3.10.2s
Cisco IOS XE=3.10.2ts
Cisco IOS XE=3.10.3e
Cisco IOS XE=3.10.3s
Cisco IOS XE=3.10.4s
Cisco IOS XE=3.10.5s
Cisco IOS XE=3.10.6s
Cisco IOS XE=3.10.7s
Cisco IOS XE=3.10.8as
Cisco IOS XE=3.10.8s
Cisco IOS XE=3.10.9s
Cisco IOS XE=3.10.10s
Cisco IOS XE=3.11.0e
Cisco IOS XE=3.11.0s
Cisco IOS XE=3.11.1s
Cisco IOS XE=3.11.2s
Cisco IOS XE=3.11.3s
Cisco IOS XE=3.11.4s
Cisco IOS XE=3.12.0as
Cisco IOS XE=3.12.0s
Cisco IOS XE=3.12.1s
Cisco IOS XE=3.12.2s
Cisco IOS XE=3.12.3s
Cisco IOS XE=3.12.4s
Cisco IOS XE=3.13.0as
Cisco IOS XE=3.13.0s
Cisco IOS XE=3.13.1s
Cisco IOS XE=3.13.2as
Cisco IOS XE=3.13.2s
Cisco IOS XE=3.13.3s
Cisco IOS XE=3.13.4s
Cisco IOS XE=3.13.5as
Cisco IOS XE=3.13.5s
Cisco IOS XE=3.13.6as
Cisco IOS XE=3.13.6bs
Cisco IOS XE=3.13.6s
Cisco IOS XE=3.13.7as
Cisco IOS XE=3.13.7s
Cisco IOS XE=3.13.8s
Cisco IOS XE=3.13.9s
Cisco IOS XE=3.13.10s
Cisco IOS XE=3.14.0s
Cisco IOS XE=3.14.1s
Cisco IOS XE=3.14.2s
Cisco IOS XE=3.14.3s
Cisco IOS XE=3.14.4s
Cisco IOS XE=3.15.0s
Cisco IOS XE=3.15.1cs
Cisco IOS XE=3.15.1s
Cisco IOS XE=3.15.2s
Cisco IOS XE=3.15.3s
Cisco IOS XE=3.15.4s
Cisco IOS XE=3.16.0cs
Cisco IOS XE=3.16.0s
Cisco IOS XE=3.16.1as
Cisco IOS XE=3.16.1s
Cisco IOS XE=3.16.2bs
Cisco IOS XE=3.16.2s
Cisco IOS XE=3.16.3s
Cisco IOS XE=3.16.4as
Cisco IOS XE=3.16.4bs
Cisco IOS XE=3.16.4cs
Cisco IOS XE=3.16.4ds
Cisco IOS XE=3.16.4es
Cisco IOS XE=3.16.4gs
Cisco IOS XE=3.16.5as
Cisco IOS XE=3.16.5bs
Cisco IOS XE=3.16.5s
Cisco IOS XE=3.16.6bs
Cisco IOS XE=3.16.6s
Cisco IOS XE=3.16.7as
Cisco IOS XE=3.16.7bs
Cisco IOS XE=3.16.7s
Cisco IOS XE=3.16.8s
Cisco IOS XE=3.16.9s
Cisco IOS XE=3.16.10s
Cisco IOS XE=3.17.0s
Cisco IOS XE=3.17.1as
Cisco IOS XE=3.17.1s
Cisco IOS XE=3.17.2s
Cisco IOS XE=3.17.3s
Cisco IOS XE=3.17.4s
Cisco IOS XE=3.18.0as
Cisco IOS XE=3.18.1asp
Cisco IOS XE=3.18.1sp
Cisco IOS XE=3.18.2asp
Cisco IOS XE=3.18.3asp
Cisco IOS XE=3.18.3bsp
Cisco IOS XE=3.18.3sp
Cisco IOS XE=3.18.4sp
Cisco IOS XE=3.18.5sp
Cisco IOS XE=3.18.6sp
Cisco IOS XE=16.1.1
Cisco IOS XE=16.1.2
Cisco IOS XE=16.1.3
Cisco IOS XE=16.2.1
Cisco IOS XE=16.2.2
Cisco IOS XE=16.3.1
Cisco IOS XE=16.3.1a
Cisco IOS XE=16.3.2
Cisco IOS XE=16.3.3
Cisco IOS XE=16.3.4
Cisco IOS XE=16.3.5
Cisco IOS XE=16.3.5b
Cisco IOS XE=16.3.6
Cisco IOS XE=16.3.7
Cisco IOS XE=16.3.8
Cisco IOS XE=16.3.9
Cisco IOS XE=16.4.1
Cisco IOS XE=16.4.2
Cisco IOS XE=16.4.3
Cisco IOS XE=16.5.1
Cisco IOS XE=16.5.1a
Cisco IOS XE=16.5.1b
Cisco IOS XE=16.5.2
Cisco IOS XE=16.5.3
Cisco IOS XE=16.6.1
Cisco IOS XE=16.6.2
Cisco IOS XE=16.6.3
Cisco IOS XE=16.6.4
Cisco IOS XE=16.6.4a
Cisco IOS XE=16.6.4s
Cisco IOS XE=16.6.5
Cisco IOS XE=16.6.5b
Cisco IOS XE=16.6.6
Cisco IOS XE=16.7.1
Cisco IOS XE=16.7.2
Cisco IOS XE=16.7.3
Cisco IOS XE=16.8.1
Cisco IOS XE=16.8.1a
Cisco IOS XE=16.8.1c
Cisco IOS XE=16.8.1s
Cisco IOS XE=16.8.2
Cisco IOS XE=16.8.3
Cisco IOS XE=16.9.1
Cisco IOS XE=16.9.1a
Cisco IOS XE=16.9.1c
Cisco IOS XE=16.9.1d
Cisco IOS XE=16.9.1s
Cisco IOS XE=16.9.2
Cisco IOS XE=16.9.2s
Cisco IOS XE=16.9.3
Cisco IOS XE=16.9.3a
Cisco IOS XE=16.9.3s
Cisco IOS XE=16.10.1
Cisco IOS XE=16.10.1a
Cisco IOS XE=16.10.1b
Cisco IOS XE=16.10.1e
Cisco IOS XE=16.10.1s
Cisco IOS XE=16.10.2
Cisco IOS XE=16.11.1
Cisco IOS XE=16.11.1a
Cisco IOS XE=16.11.1b
Cisco IOS XE=16.11.1c
Cisco IOS XE=16.11.1s
cisco NX-OS=5.2\(1\)sv3\(3.1\)
cisco NX-OS=5.2\(1\)sv3\(3.15\)
cisco NX-OS=5.2\(1\)sv3\(4.1\)
cisco NX-OS=5.2\(1\)sv3\(4.1a\)
cisco NX-OS=5.2\(1\)sv3\(4.1b\)
cisco NX-OS=5.2\(1\)sv5\(1.1\)
cisco NX-OS=5.2\(1\)sv5\(1.2\)
cisco NX-OS=5.2\(1\)sv5\(1.3\)
cisco Nexus 1000V
cisco NX-OS=8.0\(1\)
cisco Nexus 7000 10-slot
cisco Nexus 7000 18-slot
cisco Nexus 7000 4-slot
cisco Nexus 7000 9-slot

Remediation

Patch Available

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sxp-68TEVzR

Event History

Jun 3, 2020
CVE Published
via MITRE·05:42 PM
Data Sourced
via MITRE·05:42 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-3228?

CVE-2020-3228 is rated as a critical denial of service vulnerability.

2

How do I fix CVE-2020-3228?

To resolve CVE-2020-3228, you should apply the latest available patches provided by Cisco for affected devices.

3

What are the affected devices for CVE-2020-3228?

CVE-2020-3228 impacts specific versions of Cisco IOS, IOS XE, and NX-OS software.

4

What could an attacker do using CVE-2020-3228?

An unauthorized remote attacker could exploit CVE-2020-3228 to cause the affected device to reload, resulting in a denial of service.

5

Is there a workaround for CVE-2020-3228?

Cisco has not provided a specific workaround for CVE-2020-3228, making it essential to apply the recommended patches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203