Support Us — Your donation helps us keep running

Goal: 1000 CNY,Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-3407
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of the ACL that is tied to the RESTCONF or NETCONF-YANG feature. An attacker could exploit this vulnerability by accessing the device using RESTCONF or NETCONF-YANG. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
空指针解引用
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS XE 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS和IOS XE都是美国思科(Cisco)公司的产品。CLI是其中的一个命令行界面。 Cisco IOS XE Software RESTCONF,NETCONF-YANG 访问控制列表中存在安全漏洞,该漏洞源于对与RESTCONF或NETCONF-YANG功能相关的ACL的不正确处理造成的。,该漏洞允许攻击者可以通过使用RESTCONF或NETCONF-YANG访问设备来利用此漏洞。 成功利用该漏洞可能使攻击者重新加载设备,从而导致拒绝服务(DoS)状态。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
CiscoCisco IOS XE Software n/a -
II. Public POCs for CVE-2020-3407
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-3407
Please Login to view more intelligence information
New Vulnerabilities
V. Comments for CVE-2020-3407

No comments yet


Leave a comment