目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2020-3496— Cisco Small Business Smart and Managed Switches IPv6数据包处理引擎输入验证错误漏洞

EPSS 0.35% · P58
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2020-3496の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause the switch management CLI to stop responding, resulting in a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
输入验证不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Small Business Smart and Managed Switches IPv6数据包处理引擎输入验证错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Small Business Smart和Cisco Managed Switches都是思科（Cisco）的产品。Cisco Small Business Smart是一个小型交换机。Cisco Managed Switches是一个管理型交换机。 Cisco Small Business Smart and Managed Switches中的IPv6数据包处理引擎存在输入验证错误漏洞，该漏洞源于程序没有充分验证接收的IPv6流量。远程攻击者可通过发送特制的IPv6数据包利用该漏洞造成拒绝
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
CiscoCisco Small Business 250 Series Smart Switches Software n/a -

II. CVE-2020-3496の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2020-3496のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Cisco · 2020-08-26 · 22 CVEs total

CVE-2020-35078.8 HIGHCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu
CVE-2020-34438.8 HIGHCisco Smart Software Manager On-Prem Privilege Escalation Vulnerability
CVE-2020-35068.8 HIGHCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu
CVE-2020-35236.5 MEDIUMCisco Data Center Network Manager Cross-Site Scripting Vulnerability
CVE-2020-35186.5 MEDIUMCisco Data Center Network Manager Cross-Site Scripting Vulnerability
CVE-2020-35056.5 MEDIUMCisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulne
CVE-2020-34856.3 MEDIUMCisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability
CVE-2020-35226.3 MEDIUMCisco Data Center Network Manager Authorization Bypass Vulnerability
CVE-2020-34915.5 MEDIUMCisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability
CVE-2020-35205.5 MEDIUMCisco Data Center Network Manager Information Disclosure Vulnerability
CVE-2020-34845.3 MEDIUMCisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerabi
CVE-2020-35215.3 MEDIUMCisco Data Center Network Manager Read File Path Traversal Vulnerability
CVE-2020-34904.9 MEDIUMCisco Vision Dynamic Signage Director Path Traversal Vulnerability
CVE-2020-3151Cisco Connected Mobile Experiences Restricted Shell Escape Vulnerability
CVE-2020-3466Cisco DNA Center Cross-Site Scripting Vulnerabilities
CVE-2020-3446Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnera
CVE-2020-3440Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
CVE-2020-3439Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability
CVE-2020-3519Cisco Data Center Network Manager Path Traversal Vulnerability
CVE-2020-3389Cisco Hyperflex HX-Series Software Weak Storage Vulnerability

Showing 20 of 22 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Cisco Small Business 250 Series Smart Switches Software
同じベンダー: Cisco
同じ弱点: CWE-20

V. CVE-2020-3496へのコメント

まだコメントはありません

コメントを残す