high8.6
CVE-2020-3228
A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthentic…
Impact
A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because crafted SXP packets are mishandled. An attacker could exploit this vulnerability by sending specifically crafted SXP packets to the affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | Versions 12.2\(6\)i1, 15.1\(1\)sy, 15.1\(1\)sy1, 15.1\(1\)sy2, 15.1\(1\)sy3, 15.1\(1\)sy4 |
| Cisco | Ios Xe | Versions 3.3.0se, 3.3.0xo, 3.3.1se, 3.3.1xo, 3.3.2se, 3.3.2xo |
| Cisco | Nx-Os | Versions 5.2\(1\)sv3\(3.1\), 5.2\(1\)sv3\(3.15\), 5.2\(1\)sv3\(4.1\), 5.2\(1\)sv3\(4.1a\), 5.2\(1\)sv3\(4.1b\), 5.2\(1\)sv5\(1.1\) |