Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3510

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient error handling when parsing DNS requests. An attacker could exploit this vulnerability by sending a series of malicious DNS requests to an Umbrella Connector client interface of an affected device. A successful exploit could allow the attacker to cause a crash of the iosd process, which triggers a reload of the affected device.

Published

2020-09-24T18:15:21.150

Last Modified

2024-11-21T05:31:13.250

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-388
  • Type: Primary
    CWE-400
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 16.12.1 Yes
Operating System cisco ios_xe 16.12.2 Yes
Operating System cisco ios_xe 17.1.1 Yes
Hardware cisco catalyst_c9200-24p - No
Hardware cisco catalyst_c9200-24t - No
Hardware cisco catalyst_c9200-48p - No
Hardware cisco catalyst_c9200-48t - No
Hardware cisco catalyst_c9200l-24p-4g - No
Hardware cisco catalyst_c9200l-24p-4x - No
Hardware cisco catalyst_c9200l-24pxg-2y - No
Hardware cisco catalyst_c9200l-24pxg-4x - No
Hardware cisco catalyst_c9200l-24t-4g - No
Hardware cisco catalyst_c9200l-24t-4x - No
Hardware cisco catalyst_c9200l-48p-4g - No
Hardware cisco catalyst_c9200l-48p-4x - No
Hardware cisco catalyst_c9200l-48pxg-2y - No
Hardware cisco catalyst_c9200l-48pxg-4x - No
Hardware cisco catalyst_c9200l-48t-4g - No
Hardware cisco catalyst_c9200l-48t-4x - No
Hardware cisco catalyst_c9300-24p - No
Hardware cisco catalyst_c9300-24s - No
Hardware cisco catalyst_c9300-24t - No
Hardware cisco catalyst_c9300-24u - No
Hardware cisco catalyst_c9300-24ux - No
Hardware cisco catalyst_c9300-48p - No
Hardware cisco catalyst_c9300-48s - No
Hardware cisco catalyst_c9300-48t - No
Hardware cisco catalyst_c9300-48u - No
Hardware cisco catalyst_c9300-48un - No
Hardware cisco catalyst_c9300-48uxm - No
Hardware cisco catalyst_c9300l-24p-4g - No
Hardware cisco catalyst_c9300l-24p-4x - No
Hardware cisco catalyst_c9300l-24t-4g - No
Hardware cisco catalyst_c9300l-24t-4x - No
Hardware cisco catalyst_c9300l-48p-4g - No
Hardware cisco catalyst_c9300l-48p-4x - No
Hardware cisco catalyst_c9300l-48t-4g - No
Hardware cisco catalyst_c9300l-48t-4x - No
Hardware cisco catalyst_c9404r - No
Hardware cisco catalyst_c9407r - No
Hardware cisco catalyst_c9410r - No
Hardware cisco catalyst_c9500-12q - No
Hardware cisco catalyst_c9500-16x - No
Hardware cisco catalyst_c9500-24q - No
Hardware cisco catalyst_c9500-24y4c - No
Hardware cisco catalyst_c9500-32c - No
Hardware cisco catalyst_c9500-32qc - No
Hardware cisco catalyst_c9500-40x - No
Hardware cisco catalyst_c9500-48y4c - No
Hardware cisco catalyst_c9600-lc-24c - No
Hardware cisco catalyst_c9600-lc-48s - No
Hardware cisco catalyst_c9600-lc-48tx - No
Hardware cisco catalyst_c9600-lc-48yl - No
References