CVE-2020-3510 : A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for

A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient error handling when parsing DNS requests. An attacker could exploit this vulnerability by sending a series of malicious DNS requests to an Umbrella Connector client interface of an affected device. A successful exploit could allow the attacker to cause a crash of the iosd process, which triggers a reload of the affected device.

Published 2020-09-24 18:15:21

Updated 2020-10-08 14:07:41

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2020-3510

Cisco » Ios Xe » Version: 16.12.1
cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A
When used together with: Cisco » Catalyst C9300-24u » Version: N/A
When used together with: Cisco » Catalyst C9300-24ux » Version: N/A
When used together with: Cisco » Catalyst C9300-48p » Version: N/A
When used together with: Cisco » Catalyst C9300-48s » Version: N/A
When used together with: Cisco » Catalyst C9300-48t » Version: N/A
When used together with: Cisco » Catalyst C9300-48u » Version: N/A
When used together with: Cisco » Catalyst C9300-48un » Version: N/A
When used together with: Cisco » Catalyst C9300-48uxm » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9404r » Version: N/A
When used together with: Cisco » Catalyst C9407r » Version: N/A
When used together with: Cisco » Catalyst C9410r » Version: N/A
When used together with: Cisco » Catalyst C9500-12q » Version: N/A
When used together with: Cisco » Catalyst C9500-16x » Version: N/A
When used together with: Cisco » Catalyst C9500-24q » Version: N/A
When used together with: Cisco » Catalyst C9500-24y4c » Version: N/A
When used together with: Cisco » Catalyst C9500-32c » Version: N/A
When used together with: Cisco » Catalyst C9500-32qc » Version: N/A
When used together with: Cisco » Catalyst C9500-40x » Version: N/A
When used together with: Cisco » Catalyst C9500-48y4c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-24c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48s » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48tx » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48yl » Version: N/A
Cisco » Ios Xe » Version: 17.1.1
cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A
When used together with: Cisco » Catalyst C9300-24u » Version: N/A
When used together with: Cisco » Catalyst C9300-24ux » Version: N/A
When used together with: Cisco » Catalyst C9300-48p » Version: N/A
When used together with: Cisco » Catalyst C9300-48s » Version: N/A
When used together with: Cisco » Catalyst C9300-48t » Version: N/A
When used together with: Cisco » Catalyst C9300-48u » Version: N/A
When used together with: Cisco » Catalyst C9300-48un » Version: N/A
When used together with: Cisco » Catalyst C9300-48uxm » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9404r » Version: N/A
When used together with: Cisco » Catalyst C9407r » Version: N/A
When used together with: Cisco » Catalyst C9410r » Version: N/A
When used together with: Cisco » Catalyst C9500-12q » Version: N/A
When used together with: Cisco » Catalyst C9500-16x » Version: N/A
When used together with: Cisco » Catalyst C9500-24q » Version: N/A
When used together with: Cisco » Catalyst C9500-24y4c » Version: N/A
When used together with: Cisco » Catalyst C9500-32c » Version: N/A
When used together with: Cisco » Catalyst C9500-32qc » Version: N/A
When used together with: Cisco » Catalyst C9500-40x » Version: N/A
When used together with: Cisco » Catalyst C9500-48y4c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-24c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48s » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48tx » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48yl » Version: N/A
Cisco » Ios Xe » Version: 16.12.2
cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A
When used together with: Cisco » Catalyst C9300-24u » Version: N/A
When used together with: Cisco » Catalyst C9300-24ux » Version: N/A
When used together with: Cisco » Catalyst C9300-48p » Version: N/A
When used together with: Cisco » Catalyst C9300-48s » Version: N/A
When used together with: Cisco » Catalyst C9300-48t » Version: N/A
When used together with: Cisco » Catalyst C9300-48u » Version: N/A
When used together with: Cisco » Catalyst C9300-48un » Version: N/A
When used together with: Cisco » Catalyst C9300-48uxm » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9404r » Version: N/A
When used together with: Cisco » Catalyst C9407r » Version: N/A
When used together with: Cisco » Catalyst C9410r » Version: N/A
When used together with: Cisco » Catalyst C9500-12q » Version: N/A
When used together with: Cisco » Catalyst C9500-16x » Version: N/A
When used together with: Cisco » Catalyst C9500-24q » Version: N/A
When used together with: Cisco » Catalyst C9500-24y4c » Version: N/A
When used together with: Cisco » Catalyst C9500-32c » Version: N/A
When used together with: Cisco » Catalyst C9500-32qc » Version: N/A
When used together with: Cisco » Catalyst C9500-40x » Version: N/A
When used together with: Cisco » Catalyst C9500-48y4c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-24c » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48s » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48tx » Version: N/A
When used together with: Cisco » Catalyst C9600-lc-48yl » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-3510

EPSS FAQ

0.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 71 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3510

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
8.6	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	3.9	4.0	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
8.6	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	3.9	4.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-3510

CWE-388

Assigned by: ykramarz@cisco.com (Secondary)
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-3510

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-umbrella-dos-t2QMUX37

Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3510

Products affected by CVE-2020-3510

Exploit prediction scoring system (EPSS) score for CVE-2020-3510

CVSS scores for CVE-2020-3510

CWE ids for CVE-2020-3510

References for CVE-2020-3510