CVE-2020-3409CWE-20

Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability

High · published September 24, 2020

CVSS v3.0
7.4
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

A vulnerability in the PROFINET feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash and reload, resulting in a denial of service (DoS) condition on the device. The vulnerability is due to insufficient processing logic for crafted PROFINET packets that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted PROFINET packets to an affected device for processing. A successful exploit could allow the attacker to cause the device to crash and reload, resulting in a DoS condition on the device.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-09-24T18:01Z
EPSS history
Timeline
  • 24 SEP 18:01Z
    Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability
    cvelistv5