Vulnerability · Published Jun 3, 2020 · Assigned by cisco

CVE-2020-3220Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability

Medium 6.8

In plain English

A medium-severity insufficient verification of data authenticity in Cisco IOS XE Software 16.4.1 from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.0)6.8Medium

Exploit odds (30 days)0.5%top 55.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in the hardware crypto driver of Cisco IOS XE Software for Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers could allow an unauthenticated, remote attacker to disconnect legitimate IPsec VPN sessions to an affected device. The vulnerability is due to insufficient verification of authenticity of received Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by tampering with ESP cleartext values as a man-in-the-middle.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco IOS XE Software 16.4.1	n/a

Weakness: CWE-345 · Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

References

20200603 Cisco IOS XE Software IPsec VPN Denial of Service Vulnerability vendor-advisory, x_refsource_CISCO