Vulnerability Details CVE-2020-3359
A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device. A successful exploit could cause a device to reload, resulting in a DoS condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.2%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 7.8
References
Products affected by CVE-2020-3359
-
cpe:2.3:h:cisco:2610xm:-
-
cpe:2.3:h:cisco:2611xm:-
-
cpe:2.3:h:cisco:2612:-
-
cpe:2.3:h:cisco:2620xm:-
-
cpe:2.3:h:cisco:2621xm:-
-
cpe:2.3:h:cisco:2650xm:-
-
cpe:2.3:h:cisco:2651xm:-
-
cpe:2.3:h:cisco:2691:-
-
cpe:2.3:h:cisco:catalyst_9800-40:-
-
cpe:2.3:h:cisco:catalyst_9800-80:-
-
cpe:2.3:h:cisco:catalyst_9800-cl:-
-
cpe:2.3:h:cisco:catalyst_9800-l-c:-
-
cpe:2.3:h:cisco:catalyst_9800-l-f:-
-
cpe:2.3:h:cisco:catalyst_9800-l:-
-
cpe:2.3:o:cisco:ios_xe:16.12.1