8.6 High

CVE-2020-3363 A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an…

Description

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause an unexpected reboot of the switch, leading to a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Small Business 250 Series Smart Switches Software	Versions not published

References

20200805 Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability tools.cisco.com

Timeline

Published August 17, 2020
Last modified November 13, 2024

The 4 CVEs of Cisco Small Business 250 Series Smart Switches Software →

CVE-2019-15993 A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access… 7.5 High CVE-2020-3496 A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an… 5.3 Medium CVE-2019-12636 A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow… 8.1 High

Track this CVE