Cisco IOS XE ICMPv6 Traffic access control

Summaryinfo

A vulnerability was found in Cisco IOS XE. It has been declared as critical. This impacts an unknown function of the component ICMPv6 Traffic Handler. The manipulation results in access control. This vulnerability is cataloged as CVE-2020-3418. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in Cisco IOS XE (Router Operating System) (version now known). Affected is some unknown processing of the component ICMPv6 Traffic Handler. The manipulation with an unknown input leads to a access control vulnerability. CWE is classifying the issue as CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9800 Series Routers could allow an unauthenticated, adjacent attacker to send ICMPv6 traffic prior to the client being placed into RUN state. The vulnerability is due to an incomplete access control list (ACL) being applied prior to RUN state. An attacker could exploit this vulnerability by connecting to the associated service set identifier (SSID) and sending ICMPv6 traffic. A successful exploit could allow the attacker to send ICMPv6 traffic prior to RUN state.

The weakness was shared 09/24/2020 as cisco-sa-ewlc-icmpv6-qb9eYyCR as confirmed advisory (Website). The advisory is available at tools.cisco.com. This vulnerability is traded as CVE-2020-3418 since 12/12/2019. Access to the local network is required for this attack to succeed. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 09/25/2020). This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

Upgrading eliminates this vulnerability.

The entries VDB-161878, VDB-161877, VDB-161876 and VDB-161875 are related to this item. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• IOS XE

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion