Error Handling in Cisco Catalyst 9200 Series Switches and Cisco IOS XE - CVE-2020-3510
Published: September 24, 2020 / Updated: October 1, 2020
Vulnerability identifier: #VU47234
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3510
CWE-ID: CWE-388
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient error handling when parsing DNS requests in the Umbrella Connector component. A remote attacker can send a series of malicious DNS requests to an Umbrella Connector client interface and cause a denial of service condition.
Affected software
Cisco Catalyst 9200 Series Switches
Cisco IOS XE
Cisco IOS XE
How to mitigate CVE-2020-3510
Install updates from vendor's website.
Cisco IOS XE - addressed in versions Amsterdam 17.1.1, Amsterdam 17.2.1, Gibraltar 16.12.2r, 16.12.2s, 16.12.2t, 16.12.2r, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.2.0.25, 17.2.0.46, 17.2.1, 17.2.1v, 17.2.1EFT, 17.2.1a, 17.2.1r, 17.2.2, 17.3.1, 17.3.1EFT, 17.3.1a, 17.3.2EFT