cisco-sa-iosxe-mpls-dos-Ab4OUL3: Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability
First published: Wed Sep 28 2022(Updated: )
A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation of IPv4 traffic. An attacker could exploit this vulnerability by sending a malformed packet out of an affected MPLS-enabled interface. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-mpls-dos-Ab4OUL3 This advisory is part of the September 2022 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2022 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS and IOS XE Software | ||
| Cisco Catalyst 3650 Series | ||
| Cisco Catalyst 3850 Series | ||
| Cisco Catalyst 9000 Family Switches |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-iosxe-mpls-dos-Ab4OUL3?
The severity of cisco-sa-iosxe-mpls-dos-Ab4OUL3 is rated high due to its potential to cause denial of service on affected devices.
How do I fix cisco-sa-iosxe-mpls-dos-Ab4OUL3?
To fix cisco-sa-iosxe-mpls-dos-Ab4OUL3, you should apply the appropriate software patches or updates provided by Cisco.
Which devices are affected by cisco-sa-iosxe-mpls-dos-Ab4OUL3?
The devices affected by cisco-sa-iosxe-mpls-dos-Ab4OUL3 include Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches.
What type of attack does cisco-sa-iosxe-mpls-dos-Ab4OUL3 involve?
cisco-sa-iosxe-mpls-dos-Ab4OUL3 involves a denial of service attack that can cause affected devices to unexpectedly reload.
Is authentication required to exploit cisco-sa-iosxe-mpls-dos-Ab4OUL3?
No authentication is required to exploit cisco-sa-iosxe-mpls-dos-Ab4OUL3, making it particularly concerning.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/severity
- agent/references
- agent/title
- agent/author
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios and ios xe software
- canonical/cisco catalyst 3650 series
- canonical/cisco catalyst 3850 series
- canonical/cisco catalyst 9000 family switches