Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of LLDP messages in the PROFINET LLDP message handler. An attacker could exploit this vulnerability by sending a malicious LLDP message to an affected device. A successful exploit could allow the attacker to cause the affected device to reload. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. A companion advisory for affected devices that support PROFINET is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-profinet-J9QMCHPB ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-profinet-J9QMCHPB"]. This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74268"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3512US | high7.4 | — | ||
A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent a… | ||||
references
External citations — patches, advisories, analysis.
- Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerabilityself
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-profinet-J9QMCHPBexternal
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- Cisco Software Checkerexternal
- Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publicationexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
remediations (63)
- Fixed12.2(6)I1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU20
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU21
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5)E2c
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E0c
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)EB
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7a)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)JK99
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed17.1.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed17.1.1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed17.1.1s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed17.1.1t
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.0E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.0cE
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.1E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.1aE
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.1sE
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.2E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.10.3E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.11.0E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.11.1E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.11.1aE
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.9.2E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.9.2bE
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan