CVE-2020-3414: Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of IPv4 or IPv6 traffic to or through an affected device. An attacker could exploit this vulnerability by sending IP traffic to or through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =16.9.2 | |
| Cisco IOS XE | =16.10.4 | |
| Cisco IOS XE | =16.11.2 | |
| Cisco IOS XE | =16.12.3 | |
| Cisco IOS XE | =17.1.1 | |
| Cisco 4461 Integrated Services Router |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco IOS XE Software vulnerability?
The vulnerability ID for this Cisco IOS XE Software vulnerability is CVE-2020-3414.
What is the severity rating of vulnerability CVE-2020-3414?
The severity rating of vulnerability CVE-2020-3414 is 8.6 (High).
How can an unauthenticated, remote attacker exploit this vulnerability?
An unauthenticated, remote attacker can exploit this vulnerability by causing the affected device to reload, resulting in a denial of service (DoS) condition.
Which versions of Cisco IOS XE Software are affected by vulnerability CVE-2020-3414?
Vulnerability CVE-2020-3414 affects Cisco IOS XE Software versions 16.9.2, 16.10.4, 16.11.2, 16.12.3, and 17.1.1.
How can I fix vulnerability CVE-2020-3414 in Cisco IOS XE Software?
To fix vulnerability CVE-2020-3414 in Cisco IOS XE Software, it is recommended to upgrade to a fixed software release as mentioned in the Cisco Security Advisory.
- collector/nvd-index
- agent/type
- agent/weakness
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/title
- agent/last-modified-date
- agent/author
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.9.2
- version/cisco ios xe/16.10.4
- version/cisco ios xe/16.11.2
- version/cisco ios xe/16.12.3
- version/cisco ios xe/17.1.1
- canonical/cisco 4461 integrated services router