Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-3414— Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability

EPSS 1.03% · P77
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-3414

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the packet processing of Cisco IOS XE Software for Cisco 4461 Integrated Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of IPv4 or IPv6 traffic to or through an affected device. An attacker could exploit this vulnerability by sending IP traffic to or through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
数据处理错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS XE Software Cisco 4461 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS和IOS XE都是美国思科(Cisco)公司的产品。CLI是其中的一个命令行界面。 Cisco IOS XE Software Cisco 4461中存在安全漏洞,该漏洞源于对受影响的设备或通过受影响的设备的IPv4或IPv6流量的不正确处理造成的,该漏洞允许攻击者向受影响的设备发送IP通信或通过受影响的设备发送IP通信来利用此漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco IOS XE Software 17.1.1 n/a -

II. Public POCs for CVE-2020-3414

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-3414

登录查看更多情报信息。

Same Patch Batch · Cisco · 2020-09-24 · 52 CVEs total

CVE-2020-31418.8 HIGHCisco IOS XE Software Privilege Escalation Vulnerabilities
CVE-2020-34258.8 HIGHCisco IOS XE Software Privilege Escalation Vulnerabilities
CVE-2020-34808.6 HIGHCisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities
CVE-2020-33998.6 HIGHCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Se
CVE-2020-34218.6 HIGHCisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities
CVE-2020-34267.5 HIGHCisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnera
CVE-2020-34657.4 HIGHCisco IOS XE Software Ethernet Frame Denial of Service Vulnerability
CVE-2020-35087.4 HIGHCisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP
CVE-2020-33966.8 MEDIUMCisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vu
CVE-2020-34176.8 MEDIUMCisco IOS XE Software Arbitrary Code Execution Vulnerability
CVE-2020-35136.7 MEDIUMCisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Exe
CVE-2020-34166.7 MEDIUMCisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Exe
CVE-2020-34796.1 MEDIUMCisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability
CVE-2020-33936.0 MEDIUMCisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability
CVE-2020-35036.0 MEDIUMCisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability
CVE-2020-34235.1 MEDIUMCisco IOS XE Software Arbitrary Code Execution Vulnerability
CVE-2020-34754.3 MEDIUMCisco IOS XE Software Web Management Framework Vulnerabilities
CVE-2020-34744.3 MEDIUMCisco IOS XE Software Web Management Framework Vulnerabilities
CVE-2020-3428Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profilin
CVE-2020-3476Cisco IOS XE Software Arbitrary File Overwrite Vulnerability

Showing top 20 of 52 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-3414

No comments yet


Leave a comment