CERTFR-2020-AVI-599
Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans Cisco IOS XE, IOS et AireOS. Elles permettent à un attaquant de provoquer un déni de service à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

  • Cisco IOS
  • Cisco IOS XE
  • Cisco IOS XE Software Common Open Policy Service Cisco
  • Cisco IOS XE Wireless Controller Software pour Catalyst 9000
  • Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List
  • Cisco IOS XE Software pour Cisco ASR 1000 Series 20-Gbps Embedded Services Processor
  • Cisco IOS XE Software PROFINET
  • Cisco IOS XE Software pour Cisco cBR-8
  • Cisco IOS XE Software pour Cisco ASR 900 Series Route Switch Processor 3
  • Cisco IOS XE Software pour Catalyst 9200 Series Switches Umbrella Connector
  • Cisco IOS XE Software IP Service Level Agreements
  • Cisco IOS XE Software pour Catalyst 9800 Series Wireless Controllers
  • Cisco IOS XE Software Zone-Based Firewall
  • Catalyst 9800 Wireless Controllers avec IOS XE ou AireOS
  • Wireless LAN Controllers (WLC) avec IOS XE ou AireOS

Se référer aux informations fournies par le logiciel Cisco Software Checker pour confirmer si les versions logicielles en usage dans le système d'information sont affectées ou non.

Impacted products
Vendor Product Description
References
Bulletin de sécurité Cisco cisco-sa-wpa-dos-cXshjerc du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-zbfw-94ckG4G du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-isdn-q931-dos-67eUZBTf du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-capwap-dos-TPdNTdyq du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-COPS-VLD-MpbTvGEW du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-splitdns-SPWqpdGW du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-esp20-arp-dos-GvHVggqJ du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-mdns-dos-3tH6cA9J du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-umbrella-dos-t2QMUX37 du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-dhcp-dos-JSCKX43h du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-confacl-HbPtfSuO du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-profinet-J9QMCHPB du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-capwap-dos-ShFzXf du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ISR4461-gKKUROhx du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ios-profinet-dos-65qYG3W5 du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-dclass-dos-VKh9D8k3 du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ipsla-jw2DJmSv du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-le-drTOB625 du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX du 24 septembre 2020 None vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ipsla-jw2DJmSv du 24 septembre 2020 - other
Bulletin de sécurité Cisco cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K du 24 septembre 2020 - other

Show details on source website

To clipboard 

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cul\u003e \u003cli\u003eCisco IOS\u003c/li\u003e \u003cli\u003eCisco IOS XE\u003c/li\u003e \u003cli\u003eCisco IOS XE Software Common Open Policy Service Cisco\u003c/li\u003e \u003cli\u003eCisco IOS XE Wireless Controller Software pour Catalyst 9000\u003c/li\u003e \u003cli\u003eCisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List\u003c/li\u003e \u003cli\u003eCisco IOS XE Software pour Cisco ASR 1000 Series 20-Gbps Embedded Services Processor\u003c/li\u003e \u003cli\u003eCisco IOS XE Software PROFINET\u003c/li\u003e \u003cli\u003eCisco IOS XE Software pour Cisco cBR-8\u003c/li\u003e \u003cli\u003eCisco IOS XE Software pour Cisco ASR 900 Series Route Switch Processor 3\u003c/li\u003e \u003cli\u003eCisco IOS XE Software pour Catalyst 9200 Series Switches Umbrella Connector\u003c/li\u003e \u003cli\u003eCisco IOS XE Software IP Service Level Agreements\u003c/li\u003e \u003cli\u003eCisco IOS XE Software pour Catalyst 9800 Series Wireless Controllers\u003c/li\u003e \u003cli\u003eCisco IOS XE Software Zone-Based Firewall\u003c/li\u003e \u003cli\u003eCatalyst 9800 Wireless Controllers avec IOS XE ou AireOS\u003c/li\u003e \u003cli\u003eWireless LAN Controllers (WLC) avec IOS XE ou AireOS\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eSe r\u00e9f\u00e9rer aux informations fournies par le logiciel \u003cem\u003eCisco Software Checker\u003c/em\u003e pour confirmer si les versions logicielles en usage dans le syst\u00e8me d\u0027information sont affect\u00e9es ou non.\u003c/p\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2020-3407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3407"
    },
    {
      "name": "CVE-2020-3488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3488"
    },
    {
      "name": "CVE-2020-3428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3428"
    },
    {
      "name": "CVE-2020-3390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3390"
    },
    {
      "name": "CVE-2020-3408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3408"
    },
    {
      "name": "CVE-2020-3359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3359"
    },
    {
      "name": "CVE-2020-3414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3414"
    },
    {
      "name": "CVE-2020-3487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3487"
    },
    {
      "name": "CVE-2020-3526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3526"
    },
    {
      "name": "CVE-2020-3399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3399"
    },
    {
      "name": "CVE-2020-3494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3494"
    },
    {
      "name": "CVE-2020-3422",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3422"
    },
    {
      "name": "CVE-2020-3511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3511"
    },
    {
      "name": "CVE-2020-3492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3492"
    },
    {
      "name": "CVE-2020-3509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3509"
    },
    {
      "name": "CVE-2020-3486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3486"
    },
    {
      "name": "CVE-2020-3512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3512"
    },
    {
      "name": "CVE-2020-3421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3421"
    },
    {
      "name": "CVE-2020-3510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3510"
    },
    {
      "name": "CVE-2020-3465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3465"
    },
    {
      "name": "CVE-2020-3429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3429"
    },
    {
      "name": "CVE-2020-3513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3513"
    },
    {
      "name": "CVE-2020-3480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3480"
    },
    {
      "name": "CVE-2020-3416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3416"
    },
    {
      "name": "CVE-2020-3508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3508"
    },
    {
      "name": "CVE-2020-3497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3497"
    },
    {
      "name": "CVE-2020-3409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3409"
    },
    {
      "name": "CVE-2020-3493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3493"
    },
    {
      "name": "CVE-2020-3489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3489"
    },
    {
      "name": "CVE-2020-3524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-3524"
    }
  ],
  "initial_release_date": "2020-09-25T00:00:00",
  "last_revision_date": "2020-09-25T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ipsla-jw2DJmSv du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipsla-jw2DJmSv"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K"
    }
  ],
  "reference": "CERTFR-2020-AVI-599",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2020-09-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Cisco IOS XE, IOS\net AireOS. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de\nservice \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de type d\u00e9ni de service dans Cisco IOS, IOS XE, AireOS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wpa-dos-cXshjerc du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wpa-dos-cXshjerc"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-zbfw-94ckG4G du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-zbfw-94ckG4G"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ewlc-snmp-dos-wNkedg9K du 24 septembre 2020",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-isdn-q931-dos-67eUZBTf du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-isdn-q931-dos-67eUZBTf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-capwap-dos-TPdNTdyq du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capwap-dos-TPdNTdyq"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-COPS-VLD-MpbTvGEW du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-COPS-VLD-MpbTvGEW"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-splitdns-SPWqpdGW du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-splitdns-SPWqpdGW"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-esp20-arp-dos-GvHVggqJ du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esp20-arp-dos-GvHVggqJ"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-mdns-dos-3tH6cA9J du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mdns-dos-3tH6cA9J"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-umbrella-dos-t2QMUX37 du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-umbrella-dos-t2QMUX37"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcp-dos-JSCKX43h du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcp-dos-JSCKX43h"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-confacl-HbPtfSuO du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confacl-HbPtfSuO"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-profinet-J9QMCHPB du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-profinet-J9QMCHPB"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-capwap-dos-ShFzXf du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capwap-dos-ShFzXf"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ISR4461-gKKUROhx du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISR4461-gKKUROhx"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-profinet-dos-65qYG3W5 du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-profinet-dos-65qYG3W5"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dclass-dos-VKh9D8k3 du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dclass-dos-VKh9D8k3"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ipsla-jw2DJmSv du 24 septembre 2020",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-le-drTOB625 du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-le-drTOB625"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX du 24 septembre 2020",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.