csirt@kutim:~/threat-intel/cve/CVE-2020-3228

Katalog CVE

CVSS 8.6 · High EPSS 1,8%

Kerentanan Improper Input Validation pada cisco ios. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because crafted SXP packets are mishandled. An attacker could exploit this vulnerability by sending specifically crafted SXP packets to the affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Rincian

Terbit di NVD
3 Juni 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
1,8% peluang dieksploitasi; lebih tinggi dari 77,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 12.2(6)i1
cisco ios Versi 15.1(1)sy
cisco ios Versi 15.1(1)sy1
cisco ios Versi 15.1(1)sy2
cisco ios Versi 15.1(1)sy3
cisco ios Versi 15.1(1)sy4
cisco ios Versi 15.1(1)sy5
cisco ios Versi 15.1(1)sy6
cisco ios Versi 15.1(2)sy
cisco ios Versi 15.1(2)sy1
cisco ios Versi 15.1(2)sy2
cisco ios Versi 15.1(2)sy3
cisco ios Versi 15.1(2)sy4
cisco ios Versi 15.1(2)sy4a
cisco ios Versi 15.1(2)sy5
cisco ios Versi 15.1(2)sy6
cisco ios Versi 15.1(2)sy7
cisco ios Versi 15.1(2)sy8
cisco ios Versi 15.1(2)sy9
cisco ios Versi 15.1(2)sy10
cisco ios Versi 15.1(2)sy11
cisco ios Versi 15.1(2)sy12
cisco ios Versi 15.1(2)sy13
cisco ios Versi 15.1(2)sy14
cisco ios Versi 15.2(1)e
cisco ios Versi 15.2(1)e1
cisco ios Versi 15.2(1)e2
cisco ios Versi 15.2(1)e3
cisco ios Versi 15.2(1)ey
cisco ios Versi 15.2(1)sy
cisco ios Versi 15.2(1)sy0a
cisco ios Versi 15.2(1)sy1
cisco ios Versi 15.2(1)sy1a
cisco ios Versi 15.2(1)sy2
cisco ios Versi 15.2(1)sy3
cisco ios Versi 15.2(1)sy4
cisco ios Versi 15.2(1)sy5
cisco ios Versi 15.2(1)sy6
cisco ios Versi 15.2(1)sy7
cisco ios Versi 15.2(1)sy8
cisco ios Versi 15.2(2)e
cisco ios Versi 15.2(2)e1
cisco ios Versi 15.2(2)e2
cisco ios Versi 15.2(2)e3
cisco ios Versi 15.2(2)e4
cisco ios Versi 15.2(2)e5
cisco ios Versi 15.2(2)e5a
cisco ios Versi 15.2(2)e5b
cisco ios Versi 15.2(2)e6
cisco ios Versi 15.2(2)e7
cisco ios Versi 15.2(2)e7b
cisco ios Versi 15.2(2)e8
cisco ios Versi 15.2(2)e9
cisco ios Versi 15.2(2)e9a
cisco ios Versi 15.2(2)e10
cisco ios Versi 15.2(2)ea
cisco ios Versi 15.2(2)ea1
cisco ios Versi 15.2(2)ea2
cisco ios Versi 15.2(2)ea3
cisco ios Versi 15.2(2)eb

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 485 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.