CVE-2020-3203: fallo de gravedad alta en Cisco IOS XE Software 16.1.1
Cisco IOS XE Software Catalyst 9800 Series Wireless Controllers Denial of Service Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.6epss 0.8%
A vulnerability in the locally significant certificate (LSC) provisioning feature of Cisco Catalyst 9800 Series Wireless Controllers that are running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain public key infrastructure (PKI) packets. An attacker could exploit this vulnerability by sending crafted Secure Sockets Layer (SSL) packets to an affected device. A successful exploit could cause an affected device to continuously consume memory, which could result in a memory allocation failure that leads to a crash and causes a DoS condition.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Productos afectados
Cisco · Cisco IOS XE Software 16.1.1CVEs relacionadas — Cisco IOS XE Software 16.1.1
En el mismo producto, de las más peligrosas a las menos.
CVE-2020-3219HIGHCisco IOS XE Software Web UI Command Injection VulnerabilityEPSS 3.3%CVE-2019-12658HIGHCisco IOS XE Software Filesystem Exhaustion Denial of Service VulnerabilityEPSS 2.0%CVE-2020-3425HIGHCisco IOS XE Software Privilege Escalation VulnerabilitiesEPSS 1.8%CVE-2020-3141HIGHCisco IOS XE Software Privilege Escalation VulnerabilitiesEPSS 1.8%CVE-2020-3475MEDIUMCisco IOS XE Software Web Management Framework VulnerabilitiesEPSS 1.4%CVE-2020-3474MEDIUMCisco IOS XE Software Web Management Framework VulnerabilitiesEPSS 0.9%