CVE-2020-3511: Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability
A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the ISDN Q.931 messages are processed. An attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message to an affected device. A successful exploit could allow the attacker to cause the process to crash, resulting in a reload of the affected device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3511?
CVE-2020-3511 is a vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated attacker to cause a denial of service (DoS) condition.
How does CVE-2020-3511 affect Cisco devices?
CVE-2020-3511 affects Cisco devices running IOS Software and IOS XE Software with the ISDN subsystem enabled.
What is the severity of CVE-2020-3511?
The severity of CVE-2020-3511 is high, with a CVSS score of 7.4.
How can an attacker exploit CVE-2020-3511?
An attacker can exploit CVE-2020-3511 by sending malicious ISDN Q.931 packets to an affected device.
How can CVE-2020-3511 be mitigated?
To mitigate CVE-2020-3511, it is recommended to apply the necessary updates or patches provided by Cisco.