Vulnslist

find the latest Cisco vulnerabilities

Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability

cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX · High · Published · Updated

A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers and Cisco AireOS Software for Cisco Wireless LAN Controllers (WLC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of certain parameters in a Flexible NetFlow Version 9 record. An attacker could exploit this vulnerability by spoofing the address of an existing Access Point on the network and sending a Control and Provisioning of Wireless Access Points (CAPWAP) packet that includes a crafted Flexible NetFlow Version 9 record to an affected device. A successful exploit could allow the attacker to cause a process crash that would lead to a reload of the device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-wlc-fnfv9-EvrAQpNX This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2020-3492
Cisco Bug IDsCSCvr53845, CSCvr55382
CVSS ScoreBase 8.6
Base 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Wireless LAN Controller (WLC) 8.3.102.0, Cisco Wireless LAN Controller (WLC) 8.3.111.0, Cisco Wireless LAN Controller (WLC) 8.3.112.0, Cisco Wireless LAN Controller (WLC) 8.3.121.0, Cisco Wireless LAN Controller (WLC) 8.3.122.0, Cisco Wireless LAN Controller (WLC) 8.3.130.0, Cisco Wireless LAN Controller (WLC) 8.3.131.0, Cisco Wireless LAN Controller (WLC) 8.3.132.0, Cisco Wireless LAN Controller (WLC) 8.3.133.0, Cisco Wireless LAN Controller (WLC) 8.3.140.0, Cisco Wireless LAN Controller (WLC) 8.3.141.0, Cisco Wireless LAN Controller (WLC) 8.3.143.0, Cisco Wireless LAN Controller (WLC) 8.3.150.0, Cisco Wireless LAN Controller (WLC) 8.3.108.0, Cisco Wireless LAN Controller (WLC) 8.3.135.0, Cisco Wireless LAN Controller (WLC) 8.2.121.0, Cisco Wireless LAN Controller (WLC) 8.2.130.0, Cisco Wireless LAN Controller (WLC) 8.2.100.0, Cisco Wireless LAN Controller (WLC) 8.2.110.0, Cisco Wireless LAN Controller (WLC) 8.2.111.0, Cisco Wireless LAN Controller (WLC) 8.2.141.0, Cisco Wireless LAN Controller (WLC) 8.2.151.0, Cisco Wireless LAN Controller (WLC) 8.2.160.0, Cisco Wireless LAN Controller (WLC) 8.2.161.0, Cisco Wireless LAN Controller (WLC) 8.2.164.0, Cisco Wireless LAN Controller (WLC) 8.2.166.0, Cisco Wireless LAN Controller (WLC) 8.2.170.0, Cisco Wireless LAN Controller (WLC) 8.5.103.0, Cisco Wireless LAN Controller (WLC) 8.5.105.0, Cisco Wireless LAN Controller (WLC) 8.5.110.0, Cisco Wireless LAN Controller (WLC) 8.5.120.0, Cisco Wireless LAN Controller (WLC) 8.5.131.0, Cisco Wireless LAN Controller (WLC) 8.5.135.0, Cisco Wireless LAN Controller (WLC) 8.5.140.0, Cisco Wireless LAN Controller (WLC) 8.5.151.0, Cisco Wireless LAN Controller (WLC) 8.5.108.0, Cisco Wireless LAN Controller (WLC) 8.5.109.0, Cisco Wireless LAN Controller (WLC) 8.5.141.105, Cisco Wireless LAN Controller (WLC) 8.4.100.0, Cisco Wireless LAN Controller (WLC) 8.6.101.0, Cisco Wireless LAN Controller (WLC) 8.7.102.0, Cisco Wireless LAN Controller (WLC) 8.7.106.0, Cisco Wireless LAN Controller (WLC) 8.8.100.0, Cisco Wireless LAN Controller (WLC) 8.8.111.0, Cisco Wireless LAN Controller (WLC) 8.8.120.0, Cisco Wireless LAN Controller (WLC) 8.8.125.0, Cisco Wireless LAN Controller (WLC) 8.9.100.0, Cisco Wireless LAN Controller (WLC) 8.9.111.0, Cisco Wireless LAN Controller (WLC) 8.10.105.0, Cisco IOS XE Software 16.10.1, Cisco IOS XE Software 16.10.1s, Cisco IOS XE Software 16.10.1e, Cisco IOS XE Software 16.11.1, Cisco IOS XE Software 16.11.1a, Cisco IOS XE Software 16.11.1b, Cisco IOS XE Software 16.11.1c, Cisco IOS XE Software 16.12.1, Cisco IOS XE Software 16.12.1s, Cisco IOS XE Software 16.12.1t, Cisco Wireless LAN Controller (WLC), Cisco IOS XE Software, Cisco 5500 Series Wireless Controllers, Cisco 3500 Series Wireless Controllers, Cisco 8500 Series Wireless Controllers, Cisco Virtual Wireless Controller

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2020-3492 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2020-3492 Cisco OpenVuln
Cisco IOS Software CVE-2020-3492 Cisco OpenVuln
Cisco Catalyst PON Series Switches CVE-2020-3492 Cisco OpenVuln
Cisco 8500 Series Secure Routers CVE-2020-3492 Cisco OpenVuln
Cisco Wireless LAN Controller (WLC) CVE-2020-3492 Cisco OpenVuln
Cisco Virtual Wireless Controller CVE-2020-3492 Cisco OpenVuln
Cisco IOS XE Software CVE-2020-3492 Cisco OpenVuln
Cisco IOS CVE-2020-3492 Cisco OpenVuln
Cisco 8500 Series Wireless Controllers CVE-2020-3492 Cisco OpenVuln
Cisco 5500 Series Wireless Controllers CVE-2020-3492 Cisco OpenVuln
Cisco 3500 Series Wireless Controllers CVE-2020-3492 Cisco OpenVuln
Cisco Catalyst 9600 Series Switches CVE-2020-3492 Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches CVE-2020-3492 Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches CVE-2020-3492 Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches CVE-2020-3492 Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches CVE-2020-3492 Cisco OpenVuln · software-dependent