CVE-2020-3512 : A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP)

A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of LLDP messages in the PROFINET LLDP message handler. An attacker could exploit this vulnerability by sending a malicious LLDP message to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.

Published 2020-09-24 18:15:21

Updated 2020-10-08 14:03:51

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2020-3512

Cisco » Ios Xe » Version: 15.2(7)e
cpe:2.3:o:cisco:ios_xe:15.2\(7\)e:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 3650-12x48uq » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-2-40g » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-8-10g » Version: N/A
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A
When used together with: Cisco » Catalyst C9300-24u » Version: N/A
When used together with: Cisco » Catalyst C9300-24ux » Version: N/A
When used together with: Cisco » Catalyst C9300-48p » Version: N/A
When used together with: Cisco » Catalyst C9300-48s » Version: N/A
When used together with: Cisco » Catalyst C9300-48t » Version: N/A
When used together with: Cisco » Catalyst C9300-48u » Version: N/A
When used together with: Cisco » Catalyst C9300-48un » Version: N/A
When used together with: Cisco » Catalyst C9300-48uxm » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9300l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9404r » Version: N/A
When used together with: Cisco » Catalyst C9407r » Version: N/A
When used together with: Cisco » Catalyst C9410r » Version: N/A
When used together with: Cisco » Catalyst C9500-12q » Version: N/A
When used together with: Cisco » Catalyst C9500-16x » Version: N/A
When used together with: Cisco » Catalyst C9500-24q » Version: N/A
When used together with: Cisco » Catalyst C9500-24y4c » Version: N/A
When used together with: Cisco » Catalyst C9500-32c » Version: N/A
When used together with: Cisco » Catalyst C9500-32qc » Version: N/A
When used together with: Cisco » Catalyst C9500-40x » Version: N/A
When used together with: Cisco » Catalyst C9500-48y4c » Version: N/A
When used together with: Cisco » Connected Grid Switch 2520 » Version: N/A
When used together with: Cisco » Ess 2020 » Version: N/A
When used together with: Cisco » Ess 3300 » Version: N/A
When used together with: Cisco » Ie-1000 » Version: N/A
When used together with: Cisco » Ie-2000u-16tc-g » Version: N/A
When used together with: Cisco » Ie-2000u-16tc-g-x » Version: N/A
When used together with: Cisco » Ie-2000u-16tc-gp » Version: N/A
When used together with: Cisco » Ie-2000u-4s-g » Version: N/A
When used together with: Cisco » Ie-2000u-4t-gs » Version: N/A
When used together with: Cisco » Ie-2000u-4ts-g » Version: N/A
When used together with: Cisco » Ie-2000u-8tc-g » Version: N/A
When used together with: Cisco » Ie-3000 » Version: N/A
When used together with: Cisco » Ie-3010-16s-8pc Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie-3010-24tc Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie-3200-8p2s-e » Version: N/A
When used together with: Cisco » Ie-3200-8t2s-e » Version: N/A
When used together with: Cisco » Ie-3300-8p2s-a » Version: N/A
When used together with: Cisco » Ie-3300-8p2s-e » Version: N/A
When used together with: Cisco » Ie-3300-8t2s-a » Version: N/A
When used together with: Cisco » Ie-3300-8t2s-e » Version: N/A
When used together with: Cisco » Ie-3300-8t2x-a » Version: N/A
When used together with: Cisco » Ie-3300-8t2x-e » Version: N/A
When used together with: Cisco » Ie-3300-8u2x-a » Version: N/A
When used together with: Cisco » Ie-3300-8u2x-e » Version: N/A
When used together with: Cisco » Ie-3400-8p2s-a » Version: N/A
When used together with: Cisco » Ie-3400-8p2s-e » Version: N/A
When used together with: Cisco » Ie-3400-8t2s-a » Version: N/A
When used together with: Cisco » Ie-3400-8t2s-e » Version: N/A
When used together with: Cisco » Ie-4000-16gt4g-e » Version: N/A
When used together with: Cisco » Ie-4000-16t4g-e » Version: N/A
When used together with: Cisco » Ie-4000-4gc4gp4g-e » Version: N/A
When used together with: Cisco » Ie-4000-4gs8gp4g-e » Version: N/A
When used together with: Cisco » Ie-4000-4s8p4g-e » Version: N/A
When used together with: Cisco » Ie-4000-4t4p4g-e » Version: N/A
When used together with: Cisco » Ie-4000-4tc4g-e » Version: N/A
When used together with: Cisco » Ie-4000-8gs4g-e » Version: N/A
When used together with: Cisco » Ie-4000-8gt4g-e » Version: N/A
When used together with: Cisco » Ie-4000-8gt8gp4g-e » Version: N/A
When used together with: Cisco » Ie-4000-8s4g-e » Version: N/A
When used together with: Cisco » Ie-4000-8t4g-e » Version: N/A
When used together with: Cisco » Ie-4010-16s12p Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie-4010-4s24p Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie-5000-12s12p-10g » Version: N/A
When used together with: Cisco » Ie-5000-16s12p » Version: N/A
When used together with: Cisco » Ie 2000-16ptc-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16t67 Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16t67p Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16tc-g-e Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16tc-g-n Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16tc-g-x Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16tc-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-16tc Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-24t67 Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-4s-ts-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-4t-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-4t Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-4ts-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-4ts Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-8t67 Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-8t67p Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-8tc-g-e Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-8tc-g-n Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Ie 2000-8tc-g Industrial Ethernet Switch » Version: N/A
When used together with: Cisco » Iem-3300-14t2s » Version: N/A
When used together with: Cisco » Iem-3300-16p » Version: N/A
When used together with: Cisco » Iem-3300-16t » Version: N/A
When used together with: Cisco » Iem-3300-4mu-2 » Version: N/A
When used together with: Cisco » Iem-3300-6t2s » Version: N/A
When used together with: Cisco » Iem-3300-8p » Version: N/A
When used together with: Cisco » Iem-3300-8s » Version: N/A
When used together with: Cisco » Iem-3300-8t » Version: N/A
When used together with: Cisco » Iem-3400-8p » Version: N/A
When used together with: Cisco » Iem-3400-8s » Version: N/A
When used together with: Cisco » Iem-3400-8t » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-3512

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-3512

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.7	MEDIUM	AV:A/AC:M/Au:N/C:N/I:N/A:C	5.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.4	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	Cisco Systems, Inc.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High
7.4	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-3512

CWE-388

Assigned by: ykramarz@cisco.com (Secondary)
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-3512

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-profinet-dos-65qYG3W5

Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-3512

Products affected by CVE-2020-3512

Exploit prediction scoring system (EPSS) score for CVE-2020-3512

CVSS scores for CVE-2020-3512

CWE ids for CVE-2020-3512

References for CVE-2020-3512