CVE-2020-3235: Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

Published Jun 3, 2020

Updated

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the software processes specific SNMP object identifiers. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: To exploit this vulnerability by using SNMPv2c or earlier, the attacker must know the SNMP read-only community string for an affected system. To exploit this vulnerability by using SNMPv3, the attacker must know the user credentials for the affected system.

Affected Software

155 affected components

Cisco IOS=12.2\(52\)sg

Cisco IOS=12.2\(53\)sg1

Cisco IOS=12.2\(53\)sg2

Cisco IOS=12.2\(53\)sg3

Cisco IOS=12.2\(53\)sg4

Cisco IOS=12.2\(53\)sg5

Cisco IOS=12.2\(53\)sg6

Cisco IOS=12.2\(53\)sg7

Cisco IOS=12.2\(53\)sg8

Cisco IOS=12.2\(53\)sg9

Cisco IOS=12.2\(53\)sg10

Cisco IOS=12.2\(53\)sg11

Cisco IOS=12.2\(54\)sg

Cisco IOS=12.2\(54\)sg1

Cisco IOS=12.2\(54\)wo

Cisco IOS=15.0\(1\)ey

Cisco IOS=15.0\(1\)ey2

Cisco IOS=15.0\(1\)xo

Cisco IOS=15.0\(1\)xo1

Cisco IOS=15.0\(2\)ex2

Cisco IOS=15.0\(2\)ex8

Cisco IOS=15.0\(2\)sg

Cisco IOS=15.0\(2\)sg1

Cisco IOS=15.0\(2\)sg2

Cisco IOS=15.0\(2\)sg3

Cisco IOS=15.0\(2\)sg4

Cisco IOS=15.0\(2\)sg5

Cisco IOS=15.0\(2\)sg6

Cisco IOS=15.0\(2\)sg7

Cisco IOS=15.0\(2\)sg8

Cisco IOS=15.0\(2\)sg9

Cisco IOS=15.0\(2\)sg10

Cisco IOS=15.0\(2\)sg11

Cisco IOS=15.0\(2\)xo

Cisco IOS=15.1\(1\)sg

Cisco IOS=15.1\(1\)sg1

Cisco IOS=15.1\(1\)sg2

Cisco IOS=15.1\(2\)sg

Cisco IOS=15.1\(2\)sg1

Cisco IOS=15.1\(2\)sg2

Cisco IOS=15.1\(2\)sg3

Cisco IOS=15.1\(2\)sg4

Cisco IOS=15.1\(2\)sg5

Cisco IOS=15.1\(2\)sg6

Cisco IOS=15.1\(2\)sg7

Cisco IOS=15.1\(2\)sg8

Cisco IOS=15.2\(1\)e

Cisco IOS=15.2\(1\)e1

Cisco IOS=15.2\(1\)e3

Cisco IOS=15.2\(2\)e

Cisco IOS=15.2\(2\)e1

Cisco IOS=15.2\(2\)e2

Cisco IOS=15.2\(2\)e3

Cisco IOS=15.2\(2\)e4

Cisco IOS=15.2\(2\)e5

Cisco IOS=15.2\(2\)e5a

Cisco IOS=15.2\(2\)e5b

Cisco IOS=15.2\(2\)e6

Cisco IOS=15.2\(2\)e7

Cisco IOS=15.2\(2\)e7b

Cisco IOS=15.2\(2\)e8

Cisco IOS=15.2\(2\)e9

Cisco IOS=15.2\(2\)e9a

Cisco IOS=15.2\(2\)e10

Cisco IOS=15.2\(2b\)e

Cisco IOS=15.2\(3\)e

Cisco IOS=15.2\(3\)e1

Cisco IOS=15.2\(3\)e2

Cisco IOS=15.2\(3\)e3

Cisco IOS=15.2\(3\)e4

Cisco IOS=15.2\(3\)e5

Cisco IOS=15.2\(4\)e

Cisco IOS=15.2\(4\)e1

Cisco IOS=15.2\(4\)e2

Cisco IOS=15.2\(4\)e3

Cisco IOS=15.2\(4\)e4

Cisco IOS=15.2\(4\)e5

Cisco IOS=15.2\(4\)e5a

Cisco IOS=15.2\(4\)e6

Cisco IOS=15.2\(4\)e7

Cisco IOS=15.2\(4\)e8

Cisco IOS=15.3\(3\)jpj

Cisco IOS XE=3.2.0sg

Cisco IOS XE=3.2.1sg

Cisco IOS XE=3.2.2sg

Cisco IOS XE=3.2.3sg

Cisco IOS XE=3.2.4sg

Cisco IOS XE=3.2.5sg

Cisco IOS XE=3.2.6sg

Cisco IOS XE=3.2.7sg

Cisco IOS XE=3.2.8sg

Cisco IOS XE=3.2.9sg

Cisco IOS XE=3.2.10sg

Cisco IOS XE=3.2.11sg

Cisco IOS XE=3.3.0sg

Cisco IOS XE=3.3.0xo

Cisco IOS XE=3.3.1sg

Cisco IOS XE=3.3.1xo

Cisco IOS XE=3.3.2sg

Cisco IOS XE=3.3.2xo

Cisco IOS XE=3.4.0sg

Cisco IOS XE=3.4.1sg

Cisco IOS XE=3.4.2sg

Cisco IOS XE=3.4.3sg

Cisco IOS XE=3.4.4sg

Cisco IOS XE=3.4.5sg

Cisco IOS XE=3.4.6sg

Cisco IOS XE=3.4.7sg

Cisco IOS XE=3.4.8sg

Cisco IOS XE=3.5.0e

Cisco IOS XE=3.5.1e

Cisco IOS XE=3.5.2e

Cisco IOS XE=3.5.3e

Cisco IOS XE=3.6.0be

Cisco IOS XE=3.6.0e

Cisco IOS XE=3.6.1e

Cisco IOS XE=3.6.3e

Cisco IOS XE=3.6.4e

Cisco IOS XE=3.6.5ae

Cisco IOS XE=3.6.5be

Cisco IOS XE=3.6.5e

Cisco IOS XE=3.6.6e

Cisco IOS XE=3.6.7e

Cisco IOS XE=3.6.8e

Cisco IOS XE=3.6.9e

Cisco IOS XE=3.6.10e

Cisco IOS XE=3.7.0e

Cisco IOS XE=3.7.1e

Cisco IOS XE=3.7.2e

Cisco IOS XE=3.7.3e

Cisco IOS XE=3.8.0e

Cisco IOS XE=3.8.1e

Cisco IOS XE=3.8.2e

Cisco IOS XE=3.8.3e

Cisco IOS XE=3.8.4e

Cisco IOS XE=3.8.5ae

Cisco IOS XE=3.8.5e

Cisco IOS XE=3.8.6e

Cisco IOS XE=3.8.7e

Cisco IOS XE=3.8.8e

Cisco IOS XE=3.9.0e

Cisco IOS XE=3.9.1e

Cisco IOS XE=3.9.2be

Cisco IOS XE=3.9.2e

Cisco IOS XE=3.10.0ce

Cisco IOS XE=3.10.0e

Cisco IOS XE=3.10.1ae

Cisco IOS XE=3.10.1e

Cisco IOS XE=3.10.1se

Cisco IOS XE=3.10.2e

Cisco Catalyst 4503-e

Cisco Catalyst 4506-e

Cisco Catalyst 4507r\+e

Cisco Catalyst 4510r\+e

Oracle Goldengate Management Pack=12.2.1.2.0

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuoct2020.html

Event History

Jun 3, 2020

CVE Published

via MITRE·05:55 PM

Data Sourced

via MITRE·05:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-3235?

CVE-2020-3235 is classified as a high severity vulnerability allowing denial of service due to SNMP issues in Cisco products.

How do I fix CVE-2020-3235?

To mitigate CVE-2020-3235, upgrade to the patched versions of Cisco IOS or Cisco IOS XE that address this vulnerability.

What systems are affected by CVE-2020-3235?

CVE-2020-3235 affects various versions of Cisco IOS and Cisco IOS XE on Catalyst 4500 Series switches.

Can CVE-2020-3235 be exploited remotely?

Yes, CVE-2020-3235 can be exploited by an authenticated remote attacker to cause a denial of service.

What impact does CVE-2020-3235 have on device functionality?

The exploitation of CVE-2020-3235 can lead to a denial of service condition, affecting network availability.