Cisco IOS XE DHCP Message 7pk error

Summaryinfo

A vulnerability has been found in Cisco IOS XE and classified as problematic. Affected by this issue is some unknown functionality of the component DHCP Message Handler. This manipulation causes 7pk error. The identification of this vulnerability is CVE-2020-3509. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Cisco IOS XE (Router Operating System) (the affected version unknown). It has been declared as problematic. Affected by this vulnerability is an unknown part of the component DHCP Message Handler. The manipulation with an unknown input leads to a 7pk error vulnerability. The CWE definition for the vulnerability is CWE-388. As an impact it is known to affect availability. The summary by CVE is:

A vulnerability in the DHCP message handler of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause the supervisor to crash, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when DHCP version 4 (DHCPv4) messages are parsed. An attacker could exploit this vulnerability by sending a malicious DHCPv4 message to or through a WAN interface of an affected device. A successful exploit could allow the attacker to cause a reload of the affected device. Note: On Cisco cBR-8 Converged Broadband Routers, all of the following are considered WAN interfaces: 10 Gbps Ethernet interfaces 100 Gbps Ethernet interfaces Port channel interfaces that include multiple 10 and/or 100 Gbps Ethernet interfaces

The weakness was shared 09/24/2020 as cisco-sa-iosxe-dhcp-dos-JSCKX4 as confirmed advisory (Website). It is possible to read the advisory at tools.cisco.com. This vulnerability is known as CVE-2020-3509 since 12/12/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/25/2020).

Upgrading eliminates this vulnerability.

The entries VDB-161903, VDB-161900, VDB-161898 and VDB-161897 are related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• IOS XE

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion