CVE-2020-3512: Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of LLDP messages in the PROFINET LLDP message handler. An attacker could exploit this vulnerability by sending a malicious LLDP message to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | =15.2\(7\)e | |
| Cisco Catalyst 3650-12x48uq | ||
| Cisco Catalyst 3650-12x48ur | ||
| Cisco Catalyst 3650-12x48uz | ||
| Cisco Catalyst 3650-24pd | ||
| Cisco Catalyst 3650-24pdm | ||
| Cisco Catalyst 3650-48fqm | ||
| Cisco Catalyst 3650-8x24uq | ||
| Cisco Catalyst 3850-24xs | ||
| Cisco Catalyst 3850-48xs | ||
| Cisco Catalyst 3850-nm-2-40g | ||
| Cisco Catalyst 3850-nm-8-10g | ||
| Cisco Catalyst C9200-24p | ||
| Cisco Catalyst C9200-24t | ||
| Cisco Catalyst C9200-48p | ||
| Cisco Catalyst C9200-48t | ||
| Cisco Catalyst C9200l-24p-4g | ||
| Cisco Catalyst C9200l-24p-4x | ||
| Cisco Catalyst C9200l-24pxg-2y | ||
| Cisco Catalyst C9200l-24pxg-4x | ||
| Cisco Catalyst C9200l-24t-4g | ||
| Cisco Catalyst C9200l-24t-4x | ||
| Cisco Catalyst C9200l-48p-4g | ||
| Cisco Catalyst C9200l-48p-4x | ||
| Cisco Catalyst C9200l-48pxg-2y | ||
| Cisco Catalyst C9200l-48pxg-4x | ||
| Cisco Catalyst C9200l-48t-4g | ||
| Cisco Catalyst C9200l-48t-4x | ||
| Cisco Catalyst C9300-24p | ||
| Cisco Catalyst C9300-24s | ||
| Cisco Catalyst C9300-24t | ||
| Cisco Catalyst C9300-24u | ||
| Cisco Catalyst C9300-24ux | ||
| Cisco Catalyst C9300-48p | ||
| Cisco Catalyst C9300-48s | ||
| Cisco Catalyst C9300-48t | ||
| Cisco Catalyst C9300-48u | ||
| Cisco Catalyst C9300-48un | ||
| Cisco Catalyst C9300-48uxm | ||
| Cisco Catalyst C9300l-24p-4g | ||
| Cisco Catalyst C9300l-24p-4x | ||
| Cisco Catalyst C9300l-24t-4g | ||
| Cisco Catalyst C9300l-24t-4x | ||
| Cisco Catalyst C9300l-48p-4g | ||
| Cisco Catalyst C9300l-48p-4x | ||
| Cisco Catalyst C9300l-48t-4g | ||
| Cisco Catalyst C9300l-48t-4x | ||
| Cisco Catalyst C9404r | ||
| Cisco Catalyst C9407r | ||
| Cisco Catalyst C9410r | ||
| Cisco Catalyst C9500-12q | ||
| Cisco Catalyst C9500-16x | ||
| Cisco Catalyst C9500-24q | ||
| Cisco Catalyst C9500-24y4c | ||
| Cisco Catalyst C9500-32c | ||
| Cisco Catalyst C9500-32qc | ||
| Cisco Catalyst C9500-40x | ||
| Cisco Catalyst C9500-48y4c | ||
| Cisco Connected Grid Switch 2520 | ||
| Cisco Ess 2020 | ||
| Cisco Ess 3300 | ||
| Cisco Ie-1000 | ||
| Cisco Ie-2000u-16tc-g | ||
| Cisco Ie-2000u-16tc-g-x | ||
| Cisco Ie-2000u-16tc-gp | ||
| Cisco Ie-2000u-4s-g | ||
| Cisco Ie-2000u-4t-gs | ||
| Cisco Ie-2000u-4ts-g | ||
| Cisco Ie-2000u-8tc-g | ||
| Cisco Ie-3000 | ||
| Cisco Ie-3010-16s-8pc Industrial Ethernet Switch | ||
| Cisco Ie-3010-24tc Industrial Ethernet Switch | ||
| Cisco Ie-3200-8p2s-e | ||
| Cisco Ie-3200-8t2s-e | ||
| Cisco Ie-3300-8p2s-a | ||
| Cisco Ie-3300-8p2s-e | ||
| Cisco Ie-3300-8t2s-a | ||
| Cisco Ie-3300-8t2s-e | ||
| Cisco Ie-3300-8t2x-a | ||
| Cisco Ie-3300-8t2x-e | ||
| Cisco Ie-3300-8u2x-a | ||
| Cisco Ie-3300-8u2x-e | ||
| Cisco Ie-3400-8p2s-a | ||
| Cisco Ie-3400-8p2s-e | ||
| Cisco Ie-3400-8t2s-a | ||
| Cisco Ie-3400-8t2s-e | ||
| Cisco Ie-4000-16gt4g-e | ||
| Cisco Ie-4000-16t4g-e | ||
| Cisco Ie-4000-4gc4gp4g-e | ||
| Cisco Ie-4000-4gs8gp4g-e | ||
| Cisco Ie-4000-4s8p4g-e | ||
| Cisco Ie-4000-4t4p4g-e | ||
| Cisco Ie-4000-4tc4g-e | ||
| Cisco Ie-4000-8gs4g-e | ||
| Cisco Ie-4000-8gt4g-e | ||
| Cisco Ie-4000-8gt8gp4g-e | ||
| Cisco Ie-4000-8s4g-e | ||
| Cisco Ie-4000-8t4g-e | ||
| Cisco Ie-4010-16s12p Industrial Ethernet Switch | ||
| Cisco Ie-4010-4s24p Industrial Ethernet Switch | ||
| Cisco Ie-5000-12s12p-10g | ||
| Cisco Ie-5000-16s12p | ||
| Cisco Ie 2000-16ptc-g Industrial Ethernet Switch | ||
| Cisco Ie 2000-16t67 Industrial Ethernet Switch | ||
| Cisco Ie 2000-16t67p Industrial Ethernet Switch | ||
| Cisco Ie 2000-16tc-g-e Industrial Ethernet Switch | ||
| Cisco Ie 2000-16tc-g-n Industrial Ethernet Switch | ||
| Cisco Ie 2000-16tc-g-x Industrial Ethernet Switch | ||
| Cisco Ie 2000-16tc-g Industrial Ethernet Switch | ||
| Cisco Ie 2000-16tc Industrial Ethernet Switch | ||
| Cisco Ie 2000-24t67 Industrial Ethernet Switch | ||
| Cisco Ie 2000-4s-ts-g Industrial Ethernet Switch | ||
| Cisco Ie 2000-4t-g Industrial Ethernet Switch | ||
| Cisco Ie 2000-4t Industrial Ethernet Switch | ||
| Cisco Ie 2000-4ts-g Industrial Ethernet Switch | ||
| Cisco Ie 2000-4ts Industrial Ethernet Switch | ||
| Cisco Ie 2000-8t67 Industrial Ethernet Switch | ||
| Cisco Ie 2000-8t67p Industrial Ethernet Switch | ||
| Cisco Ie 2000-8tc-g-e Industrial Ethernet Switch | ||
| Cisco Ie 2000-8tc-g-n Industrial Ethernet Switch | ||
| Cisco Ie 2000-8tc-g Industrial Ethernet Switch | ||
| Cisco Iem-3300-14t2s | ||
| Cisco Iem-3300-16p | ||
| Cisco Iem-3300-16t | ||
| Cisco Iem-3300-4mu-2 | ||
| Cisco Iem-3300-6t2s | ||
| Cisco Iem-3300-8p | ||
| Cisco Iem-3300-8s | ||
| Cisco Iem-3300-8t | ||
| Cisco Iem-3400-8p | ||
| Cisco Iem-3400-8s | ||
| Cisco Iem-3400-8t |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/weakness
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/15.2\(7\)e
- canonical/cisco catalyst 3650-12x48uq
- canonical/cisco catalyst 3650-12x48ur
- canonical/cisco catalyst 3650-12x48uz
- canonical/cisco catalyst 3650-24pd
- canonical/cisco catalyst 3650-24pdm
- canonical/cisco catalyst 3650-48fqm
- canonical/cisco catalyst 3650-8x24uq
- canonical/cisco catalyst 3850-24xs
- canonical/cisco catalyst 3850-48xs
- canonical/cisco catalyst 3850-nm-2-40g
- canonical/cisco catalyst 3850-nm-8-10g
- canonical/cisco catalyst c9200-24p
- canonical/cisco catalyst c9200-24t
- canonical/cisco catalyst c9200-48p
- canonical/cisco catalyst c9200-48t
- canonical/cisco catalyst c9200l-24p-4g
- canonical/cisco catalyst c9200l-24p-4x
- canonical/cisco catalyst c9200l-24pxg-2y
- canonical/cisco catalyst c9200l-24pxg-4x
- canonical/cisco catalyst c9200l-24t-4g
- canonical/cisco catalyst c9200l-24t-4x
- canonical/cisco catalyst c9200l-48p-4g
- canonical/cisco catalyst c9200l-48p-4x
- canonical/cisco catalyst c9200l-48pxg-2y
- canonical/cisco catalyst c9200l-48pxg-4x
- canonical/cisco catalyst c9200l-48t-4g
- canonical/cisco catalyst c9200l-48t-4x
- canonical/cisco catalyst c9300-24p
- canonical/cisco catalyst c9300-24s
- canonical/cisco catalyst c9300-24t
- canonical/cisco catalyst c9300-24u
- canonical/cisco catalyst c9300-24ux
- canonical/cisco catalyst c9300-48p
- canonical/cisco catalyst c9300-48s
- canonical/cisco catalyst c9300-48t
- canonical/cisco catalyst c9300-48u
- canonical/cisco catalyst c9300-48un
- canonical/cisco catalyst c9300-48uxm
- canonical/cisco catalyst c9300l-24p-4g
- canonical/cisco catalyst c9300l-24p-4x
- canonical/cisco catalyst c9300l-24t-4g
- canonical/cisco catalyst c9300l-24t-4x
- canonical/cisco catalyst c9300l-48p-4g
- canonical/cisco catalyst c9300l-48p-4x
- canonical/cisco catalyst c9300l-48t-4g
- canonical/cisco catalyst c9300l-48t-4x
- canonical/cisco catalyst c9404r
- canonical/cisco catalyst c9407r
- canonical/cisco catalyst c9410r
- canonical/cisco catalyst c9500-12q
- canonical/cisco catalyst c9500-16x
- canonical/cisco catalyst c9500-24q
- canonical/cisco catalyst c9500-24y4c
- canonical/cisco catalyst c9500-32c
- canonical/cisco catalyst c9500-32qc
- canonical/cisco catalyst c9500-40x
- canonical/cisco catalyst c9500-48y4c
- canonical/cisco connected grid switch 2520
- canonical/cisco ess 2020
- canonical/cisco ess 3300
- canonical/cisco ie-1000
- canonical/cisco ie-2000u-16tc-g
- canonical/cisco ie-2000u-16tc-g-x
- canonical/cisco ie-2000u-16tc-gp
- canonical/cisco ie-2000u-4s-g
- canonical/cisco ie-2000u-4t-gs
- canonical/cisco ie-2000u-4ts-g
- canonical/cisco ie-2000u-8tc-g
- canonical/cisco ie-3000
- canonical/cisco ie-3010-16s-8pc industrial ethernet switch
- canonical/cisco ie-3010-24tc industrial ethernet switch
- canonical/cisco ie-3200-8p2s-e
- canonical/cisco ie-3200-8t2s-e
- canonical/cisco ie-3300-8p2s-a
- canonical/cisco ie-3300-8p2s-e
- canonical/cisco ie-3300-8t2s-a
- canonical/cisco ie-3300-8t2s-e
- canonical/cisco ie-3300-8t2x-a
- canonical/cisco ie-3300-8t2x-e
- canonical/cisco ie-3300-8u2x-a
- canonical/cisco ie-3300-8u2x-e
- canonical/cisco ie-3400-8p2s-a
- canonical/cisco ie-3400-8p2s-e
- canonical/cisco ie-3400-8t2s-a
- canonical/cisco ie-3400-8t2s-e
- canonical/cisco ie-4000-16gt4g-e
- canonical/cisco ie-4000-16t4g-e
- canonical/cisco ie-4000-4gc4gp4g-e
- canonical/cisco ie-4000-4gs8gp4g-e
- canonical/cisco ie-4000-4s8p4g-e
- canonical/cisco ie-4000-4t4p4g-e
- canonical/cisco ie-4000-4tc4g-e
- canonical/cisco ie-4000-8gs4g-e
- canonical/cisco ie-4000-8gt4g-e
- canonical/cisco ie-4000-8gt8gp4g-e
- canonical/cisco ie-4000-8s4g-e
- canonical/cisco ie-4000-8t4g-e
- canonical/cisco ie-4010-16s12p industrial ethernet switch
- canonical/cisco ie-4010-4s24p industrial ethernet switch
- canonical/cisco ie-5000-12s12p-10g
- canonical/cisco ie-5000-16s12p
- canonical/cisco ie 2000-16ptc-g industrial ethernet switch
- canonical/cisco ie 2000-16t67 industrial ethernet switch
- canonical/cisco ie 2000-16t67p industrial ethernet switch
- canonical/cisco ie 2000-16tc-g-e industrial ethernet switch
- canonical/cisco ie 2000-16tc-g-n industrial ethernet switch
- canonical/cisco ie 2000-16tc-g-x industrial ethernet switch
- canonical/cisco ie 2000-16tc-g industrial ethernet switch
- canonical/cisco ie 2000-16tc industrial ethernet switch
- canonical/cisco ie 2000-24t67 industrial ethernet switch
- canonical/cisco ie 2000-4s-ts-g industrial ethernet switch
- canonical/cisco ie 2000-4t-g industrial ethernet switch
- canonical/cisco ie 2000-4t industrial ethernet switch
- canonical/cisco ie 2000-4ts-g industrial ethernet switch
- canonical/cisco ie 2000-4ts industrial ethernet switch
- canonical/cisco ie 2000-8t67 industrial ethernet switch
- canonical/cisco ie 2000-8t67p industrial ethernet switch
- canonical/cisco ie 2000-8tc-g-e industrial ethernet switch
- canonical/cisco ie 2000-8tc-g-n industrial ethernet switch
- canonical/cisco ie 2000-8tc-g industrial ethernet switch
- canonical/cisco iem-3300-14t2s
- canonical/cisco iem-3300-16p
- canonical/cisco iem-3300-16t
- canonical/cisco iem-3300-4mu-2
- canonical/cisco iem-3300-6t2s
- canonical/cisco iem-3300-8p
- canonical/cisco iem-3300-8s
- canonical/cisco iem-3300-8t
- canonical/cisco iem-3400-8p
- canonical/cisco iem-3400-8s
- canonical/cisco iem-3400-8t