CVE-2020-3496

Medium

Description

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause the switch management CLI to stop responding, resulting in a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.

SeverityMedium
CVSS5.3
Exploit probability—
ProductCisco Sg200-50 Firmware
PublishedAug 26, 2020
First seenAug 26, 2020

How to fix

Affected products

ProductAffected versionsFixed in
cisco sg200-50_firmwarev ≤ 2.5.5.47—
cisco sg200-50p_firmwarev ≤ 2.5.5.47—
cisco sg200-50fp_firmwarev ≤ 2.5.5.47—
cisco sg200-26_firmwarev ≤ 2.5.5.47—
cisco sg200-26p_firmwarev ≤ 2.5.5.47—
cisco sg200-26fp_firmwarev ≤ 2.5.5.47—
cisco sg200-18_firmwarev ≤ 2.5.5.47—
cisco sg200-10fp_firmwarev ≤ 2.5.5.47—
cisco sg200-08_firmwarev ≤ 2.5.5.47—
cisco sg200-08p_firmwarev ≤ 2.5.5.47—
cisco sf200-24_firmwarev ≤ 2.5.5.47—
cisco sf200-24p_firmwarev ≤ 2.5.5.47—
cisco sf200-24fp_firmwarev ≤ 2.5.5.47—
cisco sf200-48_firmwarev ≤ 2.5.5.47—
cisco sf200-48p_firmwarev ≤ 2.5.5.47—
cisco sf302-08pp_firmwarev ≤ 2.5.5.47—
cisco sf302-08mpp_firmwarev ≤ 2.5.5.47—
cisco sg300-10pp_firmwarev ≤ 2.5.5.47—
cisco sg300-10mpp_firmwarev ≤ 2.5.5.47—
cisco sf300-24pp_firmwarev ≤ 2.5.5.47—
cisco sf300-48pp_firmwarev ≤ 2.5.5.47—
cisco sg300-28pp_firmwarev ≤ 2.5.5.47—
cisco sf300-08_firmwarev ≤ 2.5.5.47—
cisco sf300-48p_firmwarev ≤ 2.5.5.47—
cisco sg300-10mp_firmwarev ≤ 2.5.5.47—
cisco sg300-10p_firmwarev ≤ 2.5.5.47—
cisco sg300-10_firmwarev ≤ 2.5.5.47—
cisco sg300-28p_firmwarev ≤ 2.5.5.47—
cisco sf300-24p_firmwarev ≤ 2.5.5.47—
cisco sf302-08mp_firmwarev ≤ 2.5.5.47—
cisco sg300-28_firmwarev ≤ 2.5.5.47—
cisco sf300-48_firmwarev ≤ 2.5.5.47—
cisco sg300-20_firmwarev ≤ 2.5.5.47—
cisco sf302-08p_firmwarev ≤ 2.5.5.47—
cisco sg300-52_firmwarev ≤ 2.5.5.47—
cisco sf300-24_firmwarev ≤ 2.5.5.47—
cisco sf302-08_firmwarev ≤ 2.5.5.47—
cisco sf300-24mp_firmwarev ≤ 2.5.5.47—
cisco sg300-10sfp_firmwarev ≤ 2.5.5.47—
cisco sg300-28mp_firmwarev ≤ 2.5.5.47—
cisco sg300-52p_firmwarev ≤ 2.5.5.47—
cisco sg300-52mp_firmwarev ≤ 2.5.5.47—
cisco sg500-28mpp_firmwarev ≤ 2.5.5.47—
cisco sg500-52mp_firmwarev ≤ 2.5.5.47—
cisco sg500xg-8f8t_firmwarev ≤ 2.5.5.47—
cisco sf500-24_firmwarev ≤ 2.5.5.47—
cisco sf500-24p_firmwarev ≤ 2.5.5.47—
cisco sf500-48_firmwarev ≤ 2.5.5.47—
cisco sf500-48p_firmwarev ≤ 2.5.5.47—
cisco sg500-28_firmwarev ≤ 2.5.5.47—
cisco sg500-28p_firmwarev ≤ 2.5.5.47—
cisco sg500-52_firmwarev ≤ 2.5.5.47—
cisco sg500-52p_firmwarev ≤ 2.5.5.47—
cisco sg500x-24_firmwarev ≤ 2.5.5.47—
cisco sg500x-24p_firmwarev ≤ 2.5.5.47—
cisco sg500x-48_firmwarev ≤ 2.5.5.47—
cisco sg500x-48p_firmwarev ≤ 2.5.5.47—
cisco sg250x-24_firmwarev ≤ 2.5.5.47—
cisco sg250x-24p_firmwarev ≤ 2.5.5.47—
cisco sg250x-48_firmwarev ≤ 2.5.5.47—
cisco sg250x-48p_firmwarev ≤ 2.5.5.47—
cisco sg250-08_firmwarev ≤ 2.5.5.47—
cisco sg250-08hp_firmwarev ≤ 2.5.5.47—
cisco sg250-10p_firmwarev ≤ 2.5.5.47—
cisco sg250-18_firmwarev ≤ 2.5.5.47—
cisco sg250-26_firmwarev ≤ 2.5.5.47—
cisco sg250-26hp_firmwarev ≤ 2.5.5.47—
cisco sg250-26p_firmwarev ≤ 2.5.5.47—
cisco sg250-50_firmwarev ≤ 2.5.5.47—
cisco sg250-50hp_firmwarev ≤ 2.5.5.47—
cisco sg250-50p_firmwarev ≤ 2.5.5.47—
cisco sf250-24_firmwarev ≤ 2.5.5.47—
cisco sf250-24p_firmwarev ≤ 2.5.5.47—
cisco sf250-48_firmwarev ≤ 2.5.5.47—
cisco sf250-48hp_firmwarev ≤ 2.5.5.47—
cisco sg350-10_firmwarev ≤ 2.5.5.47—
cisco sg350-10p_firmwarev ≤ 2.5.5.47—
cisco sg350-10mp_firmwarev ≤ 2.5.5.47—
cisco sg355-10p_firmwarev ≤ 2.5.5.47—
cisco sg350-28_firmwarev ≤ 2.5.5.47—
cisco sg350-28p_firmwarev ≤ 2.5.5.47—
cisco sg350-28mp_firmwarev ≤ 2.5.5.47—
cisco sf350-48_firmwarev ≤ 2.5.5.47—
cisco sf350-48p_firmwarev ≤ 2.5.5.47—
cisco sf350-48mp_firmwarev ≤ 2.5.5.47—
cisco sg350xg-2f10_firmwarev ≤ 2.5.5.47—
cisco sg350xg-24f_firmwarev ≤ 2.5.5.47—
cisco sg350xg-24t_firmwarev ≤ 2.5.5.47—
cisco sg350xg-48t_firmwarev ≤ 2.5.5.47—
cisco sg350x-24_firmwarev ≤ 2.5.5.47—
cisco sg350x-24p_firmwarev ≤ 2.5.5.47—
cisco sg350x-24mp_firmwarev ≤ 2.5.5.47—
cisco sg350x-48_firmwarev ≤ 2.5.5.47—
cisco sg350x-48p_firmwarev ≤ 2.5.5.47—
cisco sg350x-48mp_firmwarev ≤ 2.5.5.47—
cisco sx550x-16ft_firmwarev ≤ 2.5.5.47—
cisco sx550x-24ft_firmwarev ≤ 2.5.5.47—
cisco sx550x-12f_firmwarev ≤ 2.5.5.47—
cisco sx550x-24f_firmwarev ≤ 2.5.5.47—
cisco sx550x-24_firmwarev ≤ 2.5.5.47—
cisco sx550x-52_firmwarev ≤ 2.5.5.47—
cisco sg550x-24_firmwarev ≤ 2.5.5.47—
cisco sg550x-24p_firmwarev ≤ 2.5.5.47—
cisco sg550x-24mp_firmwarev ≤ 2.5.5.47—
cisco sg550x-24mpp_firmwarev ≤ 2.5.5.47—
cisco sg550x-48_firmwarev ≤ 2.5.5.47—
cisco sg550x-48p_firmwarev ≤ 2.5.5.47—
cisco sg550x-48mp_firmwarev ≤ 2.5.5.47—
cisco sf550x-24_firmwarev ≤ 2.5.5.47—
cisco sf550x-24p_firmwarev ≤ 2.5.5.47—
cisco sf550x-24mp_firmwarev ≤ 2.5.5.47—
cisco sf550x-48_firmwarev ≤ 2.5.5.47—
cisco sf550x-48p_firmwarev ≤ 2.5.5.47—
cisco sf550x-48mp_firmwarev ≤ 2.5.5.47—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.