cisco-sa-lisp-3gYXs3qP: Cisco IOS and IOS XE Software Locator ID Separation Protocol Denial of Service Vulnerability
First published: Wed Mar 27 2024(Updated: )
A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload.This vulnerability is due to the incorrect handling of LISP packets. An attacker
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | ||
| Cisco IOS XE Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-lisp-3gYXs3qP?
The cisco-sa-lisp-3gYXs3qP vulnerability is classified as critical due to its potential to cause device reloads by unauthorized remote attackers.
How do I fix cisco-sa-lisp-3gYXs3qP?
To mitigate the cisco-sa-lisp-3gYXs3qP vulnerability, you should upgrade to a non-vulnerable version of Cisco IOS or IOS XE Software as recommended in Cisco's advisory.
What devices are affected by cisco-sa-lisp-3gYXs3qP?
The vulnerability cisco-sa-lisp-3gYXs3qP affects Cisco IOS and Cisco IOS XE Software running on various Cisco devices that utilize the Locator ID Separation Protocol.
What impact could cisco-sa-lisp-3gYXs3qP have on my network?
Exploitation of the cisco-sa-lisp-3gYXs3qP vulnerability could lead to a denial of service condition through unexpected device reloads.
Is cisco-sa-lisp-3gYXs3qP exploitable remotely?
Yes, cisco-sa-lisp-3gYXs3qP is exploitable by unauthenticated remote attackers targeting vulnerable devices.
- collector/cisco-recent
- source/Cisco
- agent/weakness
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios
- canonical/cisco ios xe software