Skip to content
7.4 High

CVE-2020-3511 A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,…

Description

A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the ISDN Q.931 messages are processed. An attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message to an affected device. A successful exploit could allow the attacker to cause the process to crash, resulting in a reload of the affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS Versions not published

References

Timeline

  1. Published
  2. Last modified
The 36 CVEs of Cisco IOS →
Track this CVE