cisco-sa-ewlc-icmpv6-qb9eYyCR: Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability

Published Sep 24, 2020

Updated

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-icmpv6-qb9eYyCR

Affected Software

3 affected components

Cisco IOS XE Wireless Controller Software

Cisco Catalyst 9800 Series Routers

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family

Event History

Sep 24, 2020

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeaknessAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-3418

Frequently Asked Questions

What is the severity of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?

The severity of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR is classified as high.

How do I fix Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?

To remediate Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR, apply the latest security patches provided by Cisco.

Who is affected by Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?

Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR affects devices running Cisco IOS XE Wireless Controller Software for the Catalyst 9800 Series Routers.

What type of attack can exploit Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?

Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR can be exploited by an unauthenticated, adjacent attacker sending ICMPv6 traffic.

What are the implications of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR?

The implications of Cisco vulnerability cisco-sa-ewlc-icmpv6-qb9eYyCR include potential disruption of network services and unauthorized access to the affected device.