CVE-2020-3508: Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the IP Address Resolution Protocol (ARP) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor (ESP) installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial of service condition. The vulnerability is due to insufficient error handling when an affected device has reached platform limitations. An attacker could exploit this vulnerability by sending a malicious series of IP ARP messages to an affected device. A successful exploit could allow the attacker to exhaust system resources, which would eventually cause the affected device to reload.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =16.3.1 | |
| Cisco IOS XE | =16.6.5 | |
| Cisco IOS XE | =16.7\(1\) | |
| Cisco IOS XE | =17.1.1 | |
| Cisco 1000v | ||
| Cisco 4321 Integrated Services Router | ||
| Cisco 4331 Integrated Services Router | ||
| Cisco 4351 Integrated Services Router | ||
| Cisco 4431 Integrated Services Router | ||
| Cisco ASR 1000 | ||
| Cisco Asr 1001-hx | ||
| Cisco Asr 1001-x | ||
| Cisco Asr 1002-hx | ||
| Cisco Asr 1002-x | ||
| Cisco Catalyst 3650-12x48fd-e | ||
| Cisco Catalyst 3650-12x48fd-l | ||
| Cisco Catalyst 3650-12x48fd-s | ||
| Cisco Catalyst 3650-24pd-e | ||
| Cisco Catalyst 3650-24pd-l | ||
| Cisco Catalyst 3650-24pd-s | ||
| Cisco Catalyst 3650-24pdm-e | ||
| Cisco Catalyst 3650-24pdm-l | ||
| Cisco Catalyst 3650-24pdm-s | ||
| Cisco Catalyst 3650-24ps-e | ||
| Cisco Catalyst 3650-24ps-l | ||
| Cisco Catalyst 3650-24ps-s | ||
| Cisco Catalyst 3650-24td-e | ||
| Cisco Catalyst 3650-24td-l | ||
| Cisco Catalyst 3650-24td-s | ||
| Cisco Catalyst 3650-24ts-e | ||
| Cisco Catalyst 3650-24ts-l | ||
| Cisco Catalyst 3650-24ts-s | ||
| Cisco Catalyst 3650-48fd-e | ||
| Cisco Catalyst 3650-48fd-l | ||
| Cisco Catalyst 3650-48fd-s | ||
| Cisco Catalyst 3650-48fq-e | ||
| Cisco Catalyst 3650-48fq-l | ||
| Cisco Catalyst 3650-48fq-s | ||
| Cisco Catalyst 3650-48fqm-e | ||
| Cisco Catalyst 3650-48fqm-l | ||
| Cisco Catalyst 3650-48fqm-s | ||
| Cisco Catalyst 3650-48fs-e | ||
| Cisco Catalyst 3650-48fs-l | ||
| Cisco Catalyst 3650-48fs-s | ||
| Cisco Catalyst 3650-48pd-e | ||
| Cisco Catalyst 3650-48pd-l | ||
| Cisco Catalyst 3650-48pd-s | ||
| Cisco Catalyst 3650-48pq-e | ||
| Cisco Catalyst 3650-48pq-l | ||
| Cisco Catalyst 3650-48pq-s | ||
| Cisco Catalyst 3650-48ps-e | ||
| Cisco Catalyst 3650-48ps-l | ||
| Cisco Catalyst 3650-48ps-s | ||
| Cisco Catalyst 3650-48td-e | ||
| Cisco Catalyst 3650-48td-l | ||
| Cisco Catalyst 3650-48td-s | ||
| Cisco Catalyst 3650-48tq-e | ||
| Cisco Catalyst 3650-48tq-l | ||
| Cisco Catalyst 3650-48tq-s | ||
| Cisco Catalyst 3650-48ts-e | ||
| Cisco Catalyst 3650-48ts-l | ||
| Cisco Catalyst 3650-48ts-s | ||
| Cisco Catalyst 3650-8x24pd-e | ||
| Cisco Catalyst 3650-8x24pd-l | ||
| Cisco Catalyst 3650-8x24pd-s | ||
| Cisco Catalyst 3850-12s-e | ||
| Cisco Catalyst 3850-12s-s | ||
| Cisco Catalyst 3850-12xs-e | ||
| Cisco Catalyst 3850-12xs-s | ||
| Cisco Catalyst 3850-16xs-e | ||
| Cisco Catalyst 3850-16xs-s | ||
| Cisco Catalyst 3850-24p-e | ||
| Cisco Catalyst 3850-24p-l | ||
| Cisco Catalyst 3850-24p-s | ||
| Cisco Catalyst 3850-24s-e | ||
| Cisco Catalyst 3850-24s-s | ||
| Cisco Catalyst 3850-24t-e | ||
| Cisco Catalyst 3850-24t-l | ||
| Cisco Catalyst 3850-24t-s | ||
| Cisco Catalyst 3850-24u-e | ||
| Cisco Catalyst 3850-24u-l | ||
| Cisco Catalyst 3850-24u-s | ||
| Cisco Catalyst 3850-24xs-e | ||
| Cisco Catalyst 3850-24xs-s | ||
| Cisco Catalyst 3850-24xu-e | ||
| Cisco Catalyst 3850-24xu-l | ||
| Cisco Catalyst 3850-24xu-s | ||
| Cisco Catalyst 3850-32xs-e | ||
| Cisco Catalyst 3850-32xs-s | ||
| Cisco Catalyst 3850-48f-e | ||
| Cisco Catalyst 3850-48f-l | ||
| Cisco Catalyst 3850-48f-s | ||
| Cisco Catalyst 3850-48p-e | ||
| Cisco Catalyst 3850-48p-l | ||
| Cisco Catalyst 3850-48p-s | ||
| Cisco Catalyst 3850-48t-e | ||
| Cisco Catalyst 3850-48t-l | ||
| Cisco Catalyst 3850-48t-s | ||
| Cisco Catalyst 3850-48u-e | ||
| Cisco Catalyst 3850-48u-l | ||
| Cisco Catalyst 3850-48u-s | ||
| Cisco Catalyst 3850-48xs-e | ||
| Cisco Catalyst 3850-48xs-f-e | ||
| Cisco Catalyst 3850-48xs-f-s | ||
| Cisco Catalyst 3850-48xs-s | ||
| Cisco Catalyst C3850-12x48u-e | ||
| Cisco Catalyst C3850-12x48u-l | ||
| Cisco Catalyst C3850-12x48u-s | ||
| Cisco IOS XE | =16.9.1 | |
| Cisco IOS XE | =17.4.1 | |
| Cisco 1100-4g Integrated Services Router | ||
| Cisco 1100-4gltegb Integrated Services Router | ||
| Cisco 1100-4gltena Integrated Services Router | ||
| Cisco 1100-4p Integrated Services Router | ||
| Cisco 1100-6g Integrated Services Router | ||
| Cisco 1100-8p Integrated Services Router | ||
| Cisco 1100-lte Integrated Services Router | ||
| Cisco 1100 Integrated Services Router | ||
| Cisco 1101-4p Integrated Services Router | ||
| Cisco 1101 Integrated Services Router | ||
| Cisco 1109-2p Integrated Services Router | ||
| Cisco 1109-4p Integrated Services Router | ||
| Cisco 1109 Integrated Services Router | ||
| Cisco 1111x-8p Integrated Services Router | ||
| Cisco 1111x Integrated Services Router | ||
| Cisco 111x Integrated Services Router | ||
| Cisco 1120 Integrated Services Router | ||
| Cisco 1160 Integrated Services Router | ||
| Cisco 4321\/k9-rf Integrated Services Router | ||
| Cisco 4321\/k9-ws Integrated Services Router | ||
| Cisco 4321\/k9 Integrated Services Router | ||
| Cisco 4331\/k9-rf Integrated Services Router | ||
| Cisco 4331\/k9-ws Integrated Services Router | ||
| Cisco 4331\/k9 Integrated Services Router | ||
| Cisco 4351\/k9-rf Integrated Services Router | ||
| Cisco 4351\/k9-ws Integrated Services Router | ||
| Cisco 4351\/k9 Integrated Services Router | ||
| Cisco 4461 Integrated Services Router | ||
| Cisco Asr 1000-x | ||
| Cisco Asr 1001 | ||
| Cisco Asr 1002 | ||
| Cisco Asr 1004 | ||
| Cisco Asr 1006 | ||
| Cisco Asr 1013 | ||
| Cisco Asr 1023 | ||
| Cisco Csr1000v |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.3.1
- version/cisco ios xe/16.6.5
- version/cisco ios xe/16.7\(1\)
- version/cisco ios xe/17.1.1
- canonical/cisco 1000v
- canonical/cisco 4321 integrated services router
- canonical/cisco 4331 integrated services router
- canonical/cisco 4351 integrated services router
- canonical/cisco 4431 integrated services router
- canonical/cisco asr 1000
- canonical/cisco asr 1001-hx
- canonical/cisco asr 1001-x
- canonical/cisco asr 1002-hx
- canonical/cisco asr 1002-x
- canonical/cisco catalyst 3650-12x48fd-e
- canonical/cisco catalyst 3650-12x48fd-l
- canonical/cisco catalyst 3650-12x48fd-s
- canonical/cisco catalyst 3650-24pd-e
- canonical/cisco catalyst 3650-24pd-l
- canonical/cisco catalyst 3650-24pd-s
- canonical/cisco catalyst 3650-24pdm-e
- canonical/cisco catalyst 3650-24pdm-l
- canonical/cisco catalyst 3650-24pdm-s
- canonical/cisco catalyst 3650-24ps-e
- canonical/cisco catalyst 3650-24ps-l
- canonical/cisco catalyst 3650-24ps-s
- canonical/cisco catalyst 3650-24td-e
- canonical/cisco catalyst 3650-24td-l
- canonical/cisco catalyst 3650-24td-s
- canonical/cisco catalyst 3650-24ts-e
- canonical/cisco catalyst 3650-24ts-l
- canonical/cisco catalyst 3650-24ts-s
- canonical/cisco catalyst 3650-48fd-e
- canonical/cisco catalyst 3650-48fd-l
- canonical/cisco catalyst 3650-48fd-s
- canonical/cisco catalyst 3650-48fq-e
- canonical/cisco catalyst 3650-48fq-l
- canonical/cisco catalyst 3650-48fq-s
- canonical/cisco catalyst 3650-48fqm-e
- canonical/cisco catalyst 3650-48fqm-l
- canonical/cisco catalyst 3650-48fqm-s
- canonical/cisco catalyst 3650-48fs-e
- canonical/cisco catalyst 3650-48fs-l
- canonical/cisco catalyst 3650-48fs-s
- canonical/cisco catalyst 3650-48pd-e
- canonical/cisco catalyst 3650-48pd-l
- canonical/cisco catalyst 3650-48pd-s
- canonical/cisco catalyst 3650-48pq-e
- canonical/cisco catalyst 3650-48pq-l
- canonical/cisco catalyst 3650-48pq-s
- canonical/cisco catalyst 3650-48ps-e
- canonical/cisco catalyst 3650-48ps-l
- canonical/cisco catalyst 3650-48ps-s
- canonical/cisco catalyst 3650-48td-e
- canonical/cisco catalyst 3650-48td-l
- canonical/cisco catalyst 3650-48td-s
- canonical/cisco catalyst 3650-48tq-e
- canonical/cisco catalyst 3650-48tq-l
- canonical/cisco catalyst 3650-48tq-s
- canonical/cisco catalyst 3650-48ts-e
- canonical/cisco catalyst 3650-48ts-l
- canonical/cisco catalyst 3650-48ts-s
- canonical/cisco catalyst 3650-8x24pd-e
- canonical/cisco catalyst 3650-8x24pd-l
- canonical/cisco catalyst 3650-8x24pd-s
- canonical/cisco catalyst 3850-12s-e
- canonical/cisco catalyst 3850-12s-s
- canonical/cisco catalyst 3850-12xs-e
- canonical/cisco catalyst 3850-12xs-s
- canonical/cisco catalyst 3850-16xs-e
- canonical/cisco catalyst 3850-16xs-s
- canonical/cisco catalyst 3850-24p-e
- canonical/cisco catalyst 3850-24p-l
- canonical/cisco catalyst 3850-24p-s
- canonical/cisco catalyst 3850-24s-e
- canonical/cisco catalyst 3850-24s-s
- canonical/cisco catalyst 3850-24t-e
- canonical/cisco catalyst 3850-24t-l
- canonical/cisco catalyst 3850-24t-s
- canonical/cisco catalyst 3850-24u-e
- canonical/cisco catalyst 3850-24u-l
- canonical/cisco catalyst 3850-24u-s
- canonical/cisco catalyst 3850-24xs-e
- canonical/cisco catalyst 3850-24xs-s
- canonical/cisco catalyst 3850-24xu-e
- canonical/cisco catalyst 3850-24xu-l
- canonical/cisco catalyst 3850-24xu-s
- canonical/cisco catalyst 3850-32xs-e
- canonical/cisco catalyst 3850-32xs-s
- canonical/cisco catalyst 3850-48f-e
- canonical/cisco catalyst 3850-48f-l
- canonical/cisco catalyst 3850-48f-s
- canonical/cisco catalyst 3850-48p-e
- canonical/cisco catalyst 3850-48p-l
- canonical/cisco catalyst 3850-48p-s
- canonical/cisco catalyst 3850-48t-e
- canonical/cisco catalyst 3850-48t-l
- canonical/cisco catalyst 3850-48t-s
- canonical/cisco catalyst 3850-48u-e
- canonical/cisco catalyst 3850-48u-l
- canonical/cisco catalyst 3850-48u-s
- canonical/cisco catalyst 3850-48xs-e
- canonical/cisco catalyst 3850-48xs-f-e
- canonical/cisco catalyst 3850-48xs-f-s
- canonical/cisco catalyst 3850-48xs-s
- canonical/cisco catalyst c3850-12x48u-e
- canonical/cisco catalyst c3850-12x48u-l
- canonical/cisco catalyst c3850-12x48u-s
- version/cisco ios xe/16.9.1
- version/cisco ios xe/17.4.1
- canonical/cisco 1100-4g integrated services router
- canonical/cisco 1100-4gltegb integrated services router
- canonical/cisco 1100-4gltena integrated services router
- canonical/cisco 1100-4p integrated services router
- canonical/cisco 1100-6g integrated services router
- canonical/cisco 1100-8p integrated services router
- canonical/cisco 1100-lte integrated services router
- canonical/cisco 1100 integrated services router
- canonical/cisco 1101-4p integrated services router
- canonical/cisco 1101 integrated services router
- canonical/cisco 1109-2p integrated services router
- canonical/cisco 1109-4p integrated services router
- canonical/cisco 1109 integrated services router
- canonical/cisco 1111x-8p integrated services router
- canonical/cisco 1111x integrated services router
- canonical/cisco 111x integrated services router
- canonical/cisco 1120 integrated services router
- canonical/cisco 1160 integrated services router
- canonical/cisco 4321\/k9-rf integrated services router
- canonical/cisco 4321\/k9-ws integrated services router
- canonical/cisco 4321\/k9 integrated services router
- canonical/cisco 4331\/k9-rf integrated services router
- canonical/cisco 4331\/k9-ws integrated services router
- canonical/cisco 4331\/k9 integrated services router
- canonical/cisco 4351\/k9-rf integrated services router
- canonical/cisco 4351\/k9-ws integrated services router
- canonical/cisco 4351\/k9 integrated services router
- canonical/cisco 4461 integrated services router
- canonical/cisco asr 1000-x
- canonical/cisco asr 1001
- canonical/cisco asr 1002
- canonical/cisco asr 1004
- canonical/cisco asr 1006
- canonical/cisco asr 1013
- canonical/cisco asr 1023
- canonical/cisco csr1000v