CVE-2020-26070

Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability

Severity Score

8.6

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource allocation when an affected device processes network traffic in software switching mode (punted). An attacker could exploit this vulnerability by sending specific streams of Layer 2 or Layer 3 protocol data units (PDUs) to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could make the device unable to process or forward traffic, resulting in a DoS condition. The device would need to be restarted to regain functionality.

Una vulnerabilidad en la función de procesamiento de paquetes de entrada de Cisco IOS XR Software para Cisco ASR 9000 Series Aggregation Services Routers, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad es debido a una asignación inapropiada de recursos cuando un dispositivo afectado procesa el tráfico de red en modo de switching de software (punteado). Un atacante podría explotar esta vulnerabilidad mediante el envío de secuencias específicas de unidades de datos de protocolo (PDU) de capa 2 o capa 3 hacia un dispositivo afectado. Un explotación con éxito podría causar a un dispositivo afectado quedarse sin recursos de búfer, que podría hacer que el dispositivo se inhabilite para procesar o reenviar el tráfico, resultando en una condición DoS. El dispositivo deberá ser reiniciado para recuperar la funcionalidad

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-09-24 CVE Reserved
2020-11-12 CVE Published
2023-07-28 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-404: Improper Resource Shutdown or Release

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cp-dos-ej8VB9QY	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9000v Search vendor "Cisco" for product "Asr 9000v"	v2 Search vendor "Cisco" for product "Asr 9000v" and version "v2"	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9001 Search vendor "Cisco" for product "Asr 9001"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9006 Search vendor "Cisco" for product "Asr 9006"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9010 Search vendor "Cisco" for product "Asr 9010"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9901 Search vendor "Cisco" for product "Asr 9901"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9903 Search vendor "Cisco" for product "Asr 9903"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9904 Search vendor "Cisco" for product "Asr 9904"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9906 Search vendor "Cisco" for product "Asr 9906"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9910 Search vendor "Cisco" for product "Asr 9910"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9912 Search vendor "Cisco" for product "Asr 9912"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	< 6.7.2 Search vendor "Cisco" for product "Ios Xr" and version " < 6.7.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9922 Search vendor "Cisco" for product "Asr 9922"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9000v Search vendor "Cisco" for product "Asr 9000v"	v2 Search vendor "Cisco" for product "Asr 9000v" and version "v2"	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9001 Search vendor "Cisco" for product "Asr 9001"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9006 Search vendor "Cisco" for product "Asr 9006"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9010 Search vendor "Cisco" for product "Asr 9010"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9901 Search vendor "Cisco" for product "Asr 9901"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9903 Search vendor "Cisco" for product "Asr 9903"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9904 Search vendor "Cisco" for product "Asr 9904"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9906 Search vendor "Cisco" for product "Asr 9906"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9910 Search vendor "Cisco" for product "Asr 9910"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9912 Search vendor "Cisco" for product "Asr 9912"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xr Search vendor "Cisco" for product "Ios Xr"	>= 7.1.0 < 7.1.2 Search vendor "Cisco" for product "Ios Xr" and version " >= 7.1.0 < 7.1.2"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 9922 Search vendor "Cisco" for product "Asr 9922"	-	-	Safe