CVE-2020-3407 : A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) funct

A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of the ACL that is tied to the RESTCONF or NETCONF-YANG feature. An attacker could exploit this vulnerability by accessing the device using RESTCONF or NETCONF-YANG. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Published 2020-09-24 18:15:18

Updated 2023-05-23 13:55:46

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2020-3407

Cisco » Ios Xe » Version: 15.8(3)m3
cpe:2.3:o:cisco:ios_xe:15.8\(3\)m3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 4221 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451 Integrated Services Router » Version: N/A
When used together with: Cisco » 4461 Integrated Services Router » Version: N/A
When used together with: Cisco » Asr 1000-x » Version: N/A
When used together with: Cisco » Asr 1001 » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1002 » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Asr 1004 » Version: N/A
When used together with: Cisco » Asr 1006 » Version: N/A
When used together with: Cisco » Asr 1013 » Version: N/A
When used together with: Cisco » Asr1001-hx » Version: N/A
When used together with: Cisco » Asr1001-hx-rf » Version: N/A
When used together with: Cisco » Asr1001-x-rf » Version: N/A
When used together with: Cisco » Asr1001-x-ws » Version: N/A
When used together with: Cisco » Asr1002-hx » Version: N/A
When used together with: Cisco » Asr1002-hx-rf » Version: N/A
When used together with: Cisco » Asr1002-hx-ws » Version: N/A
When used together with: Cisco » Asr1002-x-rf » Version: N/A
When used together with: Cisco » Asr1002-x-ws » Version: N/A
When used together with: Cisco » Catalyst 9800-40 » Version: N/A
When used together with: Cisco » Catalyst 9800-80 » Version: N/A
When used together with: Cisco » Catalyst 9800-cl » Version: N/A
When used together with: Cisco » Catalyst 9800-l » Version: N/A
When used together with: Cisco » Catalyst 9800-l-c » Version: N/A
When used together with: Cisco » Catalyst 9800-l-f » Version: N/A
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A
When used together with: Cisco » Catalyst C9300-24u » Version: N/A
When used together with: Cisco » Catalyst C9300-24ux » Version: N/A
When used together with: Cisco » Catalyst C9300-48p » Version: N/A
When used together with: Cisco » Catalyst C9300-48s » Version: N/A
When used together with: Cisco » Catalyst C9300-48t » Version: N/A
When used together with: Cisco » Catalyst C9300-48u » Version: N/A
When used together with: Cisco » Catalyst C9300-48un » Version: N/A
When used together with: Cisco » Catalyst C9300-48uxm » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9404r » Version: N/A
When used together with: Cisco » Catalyst C9407r » Version: N/A
When used together with: Cisco » Catalyst C9410r » Version: N/A
When used together with: Cisco » Catalyst C9500-12q » Version: N/A
When used together with: Cisco » Catalyst C9500-16x » Version: N/A
When used together with: Cisco » Catalyst C9500-24q » Version: N/A
When used together with: Cisco » Catalyst C9500-24y4c » Version: N/A
When used together with: Cisco » Catalyst C9500-32c » Version: N/A
When used together with: Cisco » Catalyst C9500-32qc » Version: N/A
When used together with: Cisco » Catalyst C9500-40x » Version: N/A
When used together with: Cisco » Catalyst C9500-48y4c » Version: N/A
When used together with: Cisco » Csr 1000v
When used together with: Cisco » Ws-c3650-12x48uq » Version: N/A
When used together with: Cisco » Ws-c3650-12x48ur » Version: N/A
When used together with: Cisco » Ws-c3650-12x48uz » Version: N/A
When used together with: Cisco » Ws-c3650-24pd » Version: N/A
When used together with: Cisco » Ws-c3650-24pdm » Version: N/A
When used together with: Cisco » Ws-c3650-24ps » Version: N/A
When used together with: Cisco » Ws-c3650-24td » Version: N/A
When used together with: Cisco » Ws-c3650-24ts » Version: N/A
When used together with: Cisco » Ws-c3650-48fd » Version: N/A
When used together with: Cisco » Ws-c3650-48fq » Version: N/A
When used together with: Cisco » Ws-c3650-48fqm » Version: N/A
When used together with: Cisco » Ws-c3650-48fs » Version: N/A
When used together with: Cisco » Ws-c3650-48pd » Version: N/A
When used together with: Cisco » Ws-c3650-48pq » Version: N/A
When used together with: Cisco » Ws-c3650-48ps » Version: N/A
When used together with: Cisco » Ws-c3650-48td » Version: N/A
When used together with: Cisco » Ws-c3650-48tq » Version: N/A
When used together with: Cisco » Ws-c3650-48ts » Version: N/A
When used together with: Cisco » Ws-c3650-8x24uq » Version: N/A
When used together with: Cisco » Ws-c3850 » Version: N/A
When used together with: Cisco » Ws-c3850-12s » Version: N/A
When used together with: Cisco » Ws-c3850-12x48u » Version: N/A
When used together with: Cisco » Ws-c3850-12xs » Version: N/A
When used together with: Cisco » Ws-c3850-24p » Version: N/A
When used together with: Cisco » Ws-c3850-24s » Version: N/A
When used together with: Cisco » Ws-c3850-24t » Version: N/A
When used together with: Cisco » Ws-c3850-24u » Version: N/A
When used together with: Cisco » Ws-c3850-24xs » Version: N/A
When used together with: Cisco » Ws-c3850-24xu » Version: N/A
When used together with: Cisco » Ws-c3850-48f » Version: N/A
When used together with: Cisco » Ws-c3850-48p » Version: N/A
When used together with: Cisco » Ws-c3850-48t » Version: N/A
When used together with: Cisco » Ws-c3850-48u » Version: N/A
When used together with: Cisco » Ws-c3850-48xs » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-3407

EPSS FAQ

1.26%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3407

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
8.6	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	3.9	4.0	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
8.6	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	3.9	4.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-3407

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2020-3407

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confacl-HbPtfSuO

Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3407

Products affected by CVE-2020-3407

Exploit prediction scoring system (EPSS) score for CVE-2020-3407

CVSS scores for CVE-2020-3407

CWE ids for CVE-2020-3407

References for CVE-2020-3407