Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X Authentication Bypass Vulnerability
A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is received on the 802.1X-enabled port is mishandled. An attacker could exploit this vulnerability by sending broadcast traffic on the port before being authenticated. A successful exploit could allow the attacker to send and receive broadcast traffic on the 802.1X-enabled port before authentication. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960L-DpWA9Re4 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960L-DpWA9Re4"]
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3231US | medium4.7OT elevated | — | ||
A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broad… | ||||
references
External citations — patches, advisories, analysis.
remediations (45)
- Fixed12.2(6)I1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU20
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU21
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5)EX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5a)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5b)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5c)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E0c
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7a)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7b)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)JAA1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan