Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability
A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data or cause a denial of service (DoS) condition. The vulnerability is due to a lack of input and validation checking mechanisms for virtual-LPWA (VLPWA) protocol modem messages. An attacker could exploit this vulnerability by supplying crafted packets to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data or cause the VLPWA interface of the affected device to shut down, resulting in DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-lpwa-access-cXsD7PRA ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-lpwa-access-cXsD7PRA"] This advisory is part of the September 24, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 25 Cisco Security Advisories that describe 34 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74268"].
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3426US | critical9.1 | — | ||
A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial ISR… | ||||
references
External citations — patches, advisories, analysis.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-lpwa-access-cXsD7PRAexternal
- Security Vulnerability Policyexternal
- considering software upgradesexternal
- Cisco Software Checkerexternal
- Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publicationexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories pageexternal
remediations (58)
- Fixed15.1(3)SVR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU20
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU21
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)JK99
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M1b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M6a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M6b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.6(3)M8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M4a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M4b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.7(3)M6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M2a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M3a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M3b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.8(3)M4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.9(3)M
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.9(3)M0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan