SB2020093094 - Denial of service in Cisco IOS XE Software for Cisco 4461 Integrated Services Routers



SB2020093094 - Denial of service in Cisco IOS XE Software for Cisco 4461 Integrated Services Routers

Published: September 30, 2020

Security Bulletin ID SB2020093094
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Data Handling (CVE-ID: CVE-2020-3414)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of IPv4 or IPv6 traffic to or through an affected device. A remote attacker can send IP traffic and cause the device to reload, resulting in a DoS condition.


Remediation

Install update from vendor's website.