Vulnerability Description
A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing port, resulting in a denial of service (DoS) condition. The vulnerability exists because the IP SLA responder could consume a port that could be used by another feature. An attacker could exploit this vulnerability by sending specific IP SLA control packets to the IP SLA responder on an affected device. The control packets must include the port number that could be used by another configured feature. A successful exploit could allow the attacker to cause an in-use port to be consumed by the IP SLA responder, impacting the feature that was using the port and resulting in a DoS condition.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | 16.9.3 |
| Cisco | 1100 Integrated Services Router | - |
| Cisco | 1101 Integrated Services Router | - |
| Cisco | 1109 Integrated Services Router | - |
| Cisco | 1111X Integrated Services Router | - |
| Cisco | 111X Integrated Services Router | - |
| Cisco | 1120 Integrated Services Router | - |
| Cisco | 1160 Integrated Services Router | - |
| Cisco | 4221 Integrated Services Router | - |
| Cisco | 4331 Integrated Services Router | - |
| Cisco | 4431 Integrated Services Router | - |
| Cisco | 4461 Integrated Services Router | - |
| Cisco | Asr 1001-Hx | - |
| Cisco | Asr 1001-X | - |
| Cisco | Asr 1002-Hx | - |
| Cisco | Asr 1002-X | - |
| Cisco | Asr 1004 | - |
| Cisco | Asr 1006 | - |
| Cisco | Asr 1006-X | - |
| Cisco | Asr 1009-X | - |
Related Weaknesses (CWE)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iVendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iVendor Advisory
FAQ
What is CVE-2020-3422?
CVE-2020-3422 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in the IP Service Level Agreement (SLA) responder feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the IP SLA responder to reuse an existing po...
How severe is CVE-2020-3422?
CVE-2020-3422 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-3422?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco 1100 Integrated Services Router, Cisco 1101 Integrated Services Router, Cisco 1109 Integrated Services Router, Cisco 1111X Integrated Services Router.