CVE-2020-3496

Orta

Açıklama

Cisco Small Business Smart and Managed Switches'in IPv6 paket işleme motorundaki bir güvenlik açığı, kimliği doğrulanmamış uzak bir saldırganın etkilenen cihazda hizmet reddi (DoS) durumuna neden olmasına izin verebilir. Güvenlik açığı, gelen IPv6 trafiğinin yetersiz doğrulanmasından kaynaklanmaktadır. Bir saldırgan, etkilenen bir cihaz üzerinden özel olarak hazırlanmış bir IPv6 paketi göndererek bu güvenlik açığından yararlanabilir. Başarılı bir istismar, saldırganın anahtar yönetici CLI'sının yanıt vermeyi durdurmasına ve sonuç olarak bir DoS durumuna yol açmasına neden olabilir. Bu güvenlik açığı yalnızca IPv6 trafiği için geçerlidir; IPv4 trafiği etkilenmemektedir.

ÖnemOrta
CVSS5.3
İstismar olasılığı—
ÜrünCisco Sg200-50 Firmware
Yayın26 Ağu 2020
İlk görülme26 Ağu 2020

Nasıl düzeltilir

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
cisco sg200-50_firmwarev ≤ 2.5.5.47—
cisco sg200-50p_firmwarev ≤ 2.5.5.47—
cisco sg200-50fp_firmwarev ≤ 2.5.5.47—
cisco sg200-26_firmwarev ≤ 2.5.5.47—
cisco sg200-26p_firmwarev ≤ 2.5.5.47—
cisco sg200-26fp_firmwarev ≤ 2.5.5.47—
cisco sg200-18_firmwarev ≤ 2.5.5.47—
cisco sg200-10fp_firmwarev ≤ 2.5.5.47—
cisco sg200-08_firmwarev ≤ 2.5.5.47—
cisco sg200-08p_firmwarev ≤ 2.5.5.47—
cisco sf200-24_firmwarev ≤ 2.5.5.47—
cisco sf200-24p_firmwarev ≤ 2.5.5.47—
cisco sf200-24fp_firmwarev ≤ 2.5.5.47—
cisco sf200-48_firmwarev ≤ 2.5.5.47—
cisco sf200-48p_firmwarev ≤ 2.5.5.47—
cisco sf302-08pp_firmwarev ≤ 2.5.5.47—
cisco sf302-08mpp_firmwarev ≤ 2.5.5.47—
cisco sg300-10pp_firmwarev ≤ 2.5.5.47—
cisco sg300-10mpp_firmwarev ≤ 2.5.5.47—
cisco sf300-24pp_firmwarev ≤ 2.5.5.47—
cisco sf300-48pp_firmwarev ≤ 2.5.5.47—
cisco sg300-28pp_firmwarev ≤ 2.5.5.47—
cisco sf300-08_firmwarev ≤ 2.5.5.47—
cisco sf300-48p_firmwarev ≤ 2.5.5.47—
cisco sg300-10mp_firmwarev ≤ 2.5.5.47—
cisco sg300-10p_firmwarev ≤ 2.5.5.47—
cisco sg300-10_firmwarev ≤ 2.5.5.47—
cisco sg300-28p_firmwarev ≤ 2.5.5.47—
cisco sf300-24p_firmwarev ≤ 2.5.5.47—
cisco sf302-08mp_firmwarev ≤ 2.5.5.47—
cisco sg300-28_firmwarev ≤ 2.5.5.47—
cisco sf300-48_firmwarev ≤ 2.5.5.47—
cisco sg300-20_firmwarev ≤ 2.5.5.47—
cisco sf302-08p_firmwarev ≤ 2.5.5.47—
cisco sg300-52_firmwarev ≤ 2.5.5.47—
cisco sf300-24_firmwarev ≤ 2.5.5.47—
cisco sf302-08_firmwarev ≤ 2.5.5.47—
cisco sf300-24mp_firmwarev ≤ 2.5.5.47—
cisco sg300-10sfp_firmwarev ≤ 2.5.5.47—
cisco sg300-28mp_firmwarev ≤ 2.5.5.47—
cisco sg300-52p_firmwarev ≤ 2.5.5.47—
cisco sg300-52mp_firmwarev ≤ 2.5.5.47—
cisco sg500-28mpp_firmwarev ≤ 2.5.5.47—
cisco sg500-52mp_firmwarev ≤ 2.5.5.47—
cisco sg500xg-8f8t_firmwarev ≤ 2.5.5.47—
cisco sf500-24_firmwarev ≤ 2.5.5.47—
cisco sf500-24p_firmwarev ≤ 2.5.5.47—
cisco sf500-48_firmwarev ≤ 2.5.5.47—
cisco sf500-48p_firmwarev ≤ 2.5.5.47—
cisco sg500-28_firmwarev ≤ 2.5.5.47—
cisco sg500-28p_firmwarev ≤ 2.5.5.47—
cisco sg500-52_firmwarev ≤ 2.5.5.47—
cisco sg500-52p_firmwarev ≤ 2.5.5.47—
cisco sg500x-24_firmwarev ≤ 2.5.5.47—
cisco sg500x-24p_firmwarev ≤ 2.5.5.47—
cisco sg500x-48_firmwarev ≤ 2.5.5.47—
cisco sg500x-48p_firmwarev ≤ 2.5.5.47—
cisco sg250x-24_firmwarev ≤ 2.5.5.47—
cisco sg250x-24p_firmwarev ≤ 2.5.5.47—
cisco sg250x-48_firmwarev ≤ 2.5.5.47—
cisco sg250x-48p_firmwarev ≤ 2.5.5.47—
cisco sg250-08_firmwarev ≤ 2.5.5.47—
cisco sg250-08hp_firmwarev ≤ 2.5.5.47—
cisco sg250-10p_firmwarev ≤ 2.5.5.47—
cisco sg250-18_firmwarev ≤ 2.5.5.47—
cisco sg250-26_firmwarev ≤ 2.5.5.47—
cisco sg250-26hp_firmwarev ≤ 2.5.5.47—
cisco sg250-26p_firmwarev ≤ 2.5.5.47—
cisco sg250-50_firmwarev ≤ 2.5.5.47—
cisco sg250-50hp_firmwarev ≤ 2.5.5.47—
cisco sg250-50p_firmwarev ≤ 2.5.5.47—
cisco sf250-24_firmwarev ≤ 2.5.5.47—
cisco sf250-24p_firmwarev ≤ 2.5.5.47—
cisco sf250-48_firmwarev ≤ 2.5.5.47—
cisco sf250-48hp_firmwarev ≤ 2.5.5.47—
cisco sg350-10_firmwarev ≤ 2.5.5.47—
cisco sg350-10p_firmwarev ≤ 2.5.5.47—
cisco sg350-10mp_firmwarev ≤ 2.5.5.47—
cisco sg355-10p_firmwarev ≤ 2.5.5.47—
cisco sg350-28_firmwarev ≤ 2.5.5.47—
cisco sg350-28p_firmwarev ≤ 2.5.5.47—
cisco sg350-28mp_firmwarev ≤ 2.5.5.47—
cisco sf350-48_firmwarev ≤ 2.5.5.47—
cisco sf350-48p_firmwarev ≤ 2.5.5.47—
cisco sf350-48mp_firmwarev ≤ 2.5.5.47—
cisco sg350xg-2f10_firmwarev ≤ 2.5.5.47—
cisco sg350xg-24f_firmwarev ≤ 2.5.5.47—
cisco sg350xg-24t_firmwarev ≤ 2.5.5.47—
cisco sg350xg-48t_firmwarev ≤ 2.5.5.47—
cisco sg350x-24_firmwarev ≤ 2.5.5.47—
cisco sg350x-24p_firmwarev ≤ 2.5.5.47—
cisco sg350x-24mp_firmwarev ≤ 2.5.5.47—
cisco sg350x-48_firmwarev ≤ 2.5.5.47—
cisco sg350x-48p_firmwarev ≤ 2.5.5.47—
cisco sg350x-48mp_firmwarev ≤ 2.5.5.47—
cisco sx550x-16ft_firmwarev ≤ 2.5.5.47—
cisco sx550x-24ft_firmwarev ≤ 2.5.5.47—
cisco sx550x-12f_firmwarev ≤ 2.5.5.47—
cisco sx550x-24f_firmwarev ≤ 2.5.5.47—
cisco sx550x-24_firmwarev ≤ 2.5.5.47—
cisco sx550x-52_firmwarev ≤ 2.5.5.47—
cisco sg550x-24_firmwarev ≤ 2.5.5.47—
cisco sg550x-24p_firmwarev ≤ 2.5.5.47—
cisco sg550x-24mp_firmwarev ≤ 2.5.5.47—
cisco sg550x-24mpp_firmwarev ≤ 2.5.5.47—
cisco sg550x-48_firmwarev ≤ 2.5.5.47—
cisco sg550x-48p_firmwarev ≤ 2.5.5.47—
cisco sg550x-48mp_firmwarev ≤ 2.5.5.47—
cisco sf550x-24_firmwarev ≤ 2.5.5.47—
cisco sf550x-24p_firmwarev ≤ 2.5.5.47—
cisco sf550x-24mp_firmwarev ≤ 2.5.5.47—
cisco sf550x-48_firmwarev ≤ 2.5.5.47—
cisco sf550x-48p_firmwarev ≤ 2.5.5.47—
cisco sf550x-48mp_firmwarev ≤ 2.5.5.47—

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2020-3496 · Cisco Sg200-50 Firmware · Dark Radar