Data Handling in Cisco 4461 Integrated Services Routers and Cisco IOS XE - CVE-2020-3414
Published: September 24, 2020 / Updated: September 30, 2020
Vulnerability identifier: #VU47211
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3414
CWE-ID: CWE-19
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of IPv4 or IPv6 traffic to or through an affected device. A remote attacker can send IP traffic and cause the device to reload, resulting in a DoS condition.
Affected software
Cisco 4461 Integrated Services Routers
Cisco IOS XE
Cisco IOS XE
How to mitigate CVE-2020-3414
Install update from vendor's website.
Cisco IOS XE - addressed in versions Amsterdam 17.1.2, Amsterdam 17.2.1, Amsterdam 17.2.1r, Amsterdam 17.3.1, Fuji 16.9.6, 16.9.5.1, 16.9.6, 16.12.1z, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 17.1.2, 17.2.1, 17.2.1v, 17.2.1EFT, 17.2.1a, 17.2.1r, 17.2.2, 17.3.0.54, 17.3.1, 17.3.1EFT, 17.3.1a, 17.3.2EFT