CVE-2020-26070
Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource allocation when an affected device processes network traffic in software switching mode (punted). An attacker could exploit this vulnerability by sending specific streams of Layer 2 or Layer 3 protocol data units (PDUs) to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could make the device unable to process or forward traffic, resulting in a DoS condition. The device would need to be restarted to regain functionality.
Una vulnerabilidad en la función de procesamiento de paquetes de entrada de Cisco IOS XR Software para Cisco ASR 9000 Series Aggregation Services Routers, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad es debido a una asignación inapropiada de recursos cuando un dispositivo afectado procesa el tráfico de red en modo de switching de software (punteado). Un atacante podría explotar esta vulnerabilidad mediante el envío de secuencias específicas de unidades de datos de protocolo (PDU) de capa 2 o capa 3 hacia un dispositivo afectado. Un explotación con éxito podría causar a un dispositivo afectado quedarse sin recursos de búfer, que podría hacer que el dispositivo se inhabilite para procesar o reenviar el tráfico, resultando en una condición DoS. El dispositivo deberá ser reiniciado para recuperar la funcionalidad
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-09-24 CVE Reserved
- 2020-11-12 CVE Published
- 2023-07-28 EPSS Updated
- 2024-11-13 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-404: Improper Resource Shutdown or Release
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9000v Search vendor "Cisco" for product "Asr 9000v" | v2 Search vendor "Cisco" for product "Asr 9000v" and version "v2" | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9001 Search vendor "Cisco" for product "Asr 9001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9006 Search vendor "Cisco" for product "Asr 9006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9010 Search vendor "Cisco" for product "Asr 9010" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9901 Search vendor "Cisco" for product "Asr 9901" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9903 Search vendor "Cisco" for product "Asr 9903" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9904 Search vendor "Cisco" for product "Asr 9904" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9906 Search vendor "Cisco" for product "Asr 9906" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9910 Search vendor "Cisco" for product "Asr 9910" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9912 Search vendor "Cisco" for product "Asr 9912" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | < 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9922 Search vendor "Cisco" for product "Asr 9922" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9000v Search vendor "Cisco" for product "Asr 9000v" | v2 Search vendor "Cisco" for product "Asr 9000v" and version "v2" | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9001 Search vendor "Cisco" for product "Asr 9001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9006 Search vendor "Cisco" for product "Asr 9006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9010 Search vendor "Cisco" for product "Asr 9010" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9901 Search vendor "Cisco" for product "Asr 9901" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9903 Search vendor "Cisco" for product "Asr 9903" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9904 Search vendor "Cisco" for product "Asr 9904" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9906 Search vendor "Cisco" for product "Asr 9906" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9910 Search vendor "Cisco" for product "Asr 9910" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9912 Search vendor "Cisco" for product "Asr 9912" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xr Search vendor "Cisco" for product "Ios Xr" | >= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 9922 Search vendor "Cisco" for product "Asr 9922" | - | - |
Safe
|