cisco-sa-iosxe-fnfv9-dos-HND6Fc9u: Cisco IOS XE Software Flexible NetFlow Version 9 Denial of Service Vulnerability
First published: Wed Jun 03 2020(Updated: )
A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of parameters in a Flexible NetFlow Version 9 record. An attacker could exploit this vulnerability by sending a malformed Flexible NetFlow Version 9 packet to the Control and Provisioning of Wireless Access Points (CAPWAP) data port of an affected device. An exploit could allow the attacker to trigger an infinite loop, resulting in a process crash that would cause a reload of the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-fnfv9-dos-HND6Fc9u This advisory is part of the June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 23 Cisco Security Advisories that describe 25 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: This vulnerability was found by Mathieu Monney Cisco during internal security testing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | ||
| Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-iosxe-fnfv9-dos-HND6Fc9u?
The cisco-sa-iosxe-fnfv9-dos-HND6Fc9u vulnerability has a high severity rating due to its potential to cause a denial of service condition.
How do I fix cisco-sa-iosxe-fnfv9-dos-HND6Fc9u?
To mitigate the effects of cisco-sa-iosxe-fnfv9-dos-HND6Fc9u, apply the recommended software updates or patches provided by Cisco.
Which devices are affected by cisco-sa-iosxe-fnfv9-dos-HND6Fc9u?
The cisco-sa-iosxe-fnfv9-dos-HND6Fc9u vulnerability affects Cisco IOS XE Software running on Catalyst 9800 Series Wireless Controllers.
Can cisco-sa-iosxe-fnfv9-dos-HND6Fc9u be exploited remotely?
Yes, the cisco-sa-iosxe-fnfv9-dos-HND6Fc9u vulnerability allows an unauthenticated, remote attacker to exploit the system.
What are the symptoms of cisco-sa-iosxe-fnfv9-dos-HND6Fc9u?
Symptoms of the cisco-sa-iosxe-fnfv9-dos-HND6Fc9u vulnerability include loss of network connectivity and service interruptions on affected devices.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/author
- agent/title
- agent/weakness
- agent/severity
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- canonical/cisco ios xe software for catalyst 9800 series wireless controllers