CVE-2020-3421 (CNNVD-202009-1442)
中文标题:
Cisco IOS XE Software Zone-Based Firewall 代码问题漏洞
英文标题:
Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities
漏洞描述
中文描述:
Cisco IOS和IOS XE都是美国思科（Cisco）公司的产品。CLI是其中的一个命令行界面。 Cisco IOS XE Software Zone-Based Firewall feature中存在安全漏洞，该漏洞源于未通过设备处理第4层数据包引起的，该漏洞允许攻击者可以通过设备发送一定顺序的流量模式来利用这些漏洞。
英文描述:
Multiple vulnerabilities in the Zone-Based Firewall feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload or stop forwarding traffic through the firewall. The vulnerabilities are due to incomplete handling of Layer 4 packets through the device. An attacker could exploit these vulnerabilities by sending a certain sequence of traffic patterns through the device. A successful exploit could allow the attacker to cause the device to reload or stop forwarding traffic through the firewall, resulting in a denial of service. For more information about these vulnerabilities, see the Details section of this advisory.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco IOS XE Software | n/a | - | - |
cpe:2.3:a:cisco:cisco_ios_xe_software:n_a:*:*:*:*:*:*:*
|
| cisco | ios_xe | 16.9.3 | - | - |
cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*
|
| cisco | ios_xe | 17.2 | - | - |
cpe:2.3:o:cisco:ios_xe:17.2:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2020-3421 |
2025-11-11 15:20:37 | 2025-11-11 07:36:19 |
| NVD | nvd_CVE-2020-3421 |
2025-11-11 14:57:03 | 2025-11-11 07:44:43 |
| CNNVD | cnnvd_CNNVD-202009-1442 |
2025-11-11 15:10:30 | 2025-11-11 07:56:26 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 代码问题
- cnnvd_id: 未提取 -> CNNVD-202009-1442
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 3
- data_sources: ['cve'] -> ['cve', 'nvd']