Strix
26.1K

CVE-2020-3200

HIGHCVSS 7.7/10EPSS 1.72%

Last modified

CVE-2020-3200 is a high-severity vulnerability rated 7.7/10 on the CVSS scale. A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. EPSS estimates a 1.72% chance of exploitation in the next 30 days.

Description

A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An attacker could exploit this vulnerability by creating an SSH connection to an affected device and using a specific traffic pattern that causes an error condition within that connection. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Metrics

CVSS 3.1
7.7/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS Probability
1.72%

74.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoIos12.2\(6\)i1
CiscoIos12.2\(58\)ex
CiscoIos12.2\(58\)ey
CiscoIos12.2\(58\)ey1
CiscoIos12.2\(58\)ey2
CiscoIos12.2\(58\)ez
CiscoIos12.2\(58\)se
CiscoIos12.2\(58\)se1
CiscoIos12.2\(58\)se2
CiscoIos12.2\(60\)ez
CiscoIos12.2\(60\)ez1
CiscoIos12.2\(60\)ez2
CiscoIos12.2\(60\)ez3
CiscoIos12.2\(60\)ez4
CiscoIos12.2\(60\)ez5
CiscoIos12.2\(60\)ez6
CiscoIos12.2\(60\)ez7
CiscoIos12.2\(60\)ez8
CiscoIos12.2\(60\)ez9
CiscoIos12.2\(60\)ez10
CiscoIos12.2\(60\)ez11
CiscoIos12.2\(60\)ez12
CiscoIos12.2\(60\)ez13
CiscoIos12.2\(60\)ez14
CiscoIos12.4\(22\)md
CiscoIos12.4\(22\)md1
CiscoIos12.4\(22\)md2
CiscoIos12.4\(22\)mda
CiscoIos12.4\(22\)mda1
CiscoIos12.4\(22\)mda2
CiscoIos12.4\(22\)mda3
CiscoIos12.4\(22\)mda4
CiscoIos12.4\(22\)mda5
CiscoIos12.4\(22\)mda6
CiscoIos12.4\(22\)t
CiscoIos12.4\(22\)t1
CiscoIos12.4\(22\)t2
CiscoIos12.4\(22\)t3
CiscoIos12.4\(22\)t4
CiscoIos12.4\(22\)t5
CiscoIos12.4\(22\)xr1
CiscoIos12.4\(22\)xr2
CiscoIos12.4\(22\)xr3
CiscoIos12.4\(22\)xr4
CiscoIos12.4\(22\)xr5
CiscoIos12.4\(22\)xr6
CiscoIos12.4\(22\)xr7
CiscoIos12.4\(22\)xr8
CiscoIos12.4\(22\)xr9
CiscoIos12.4\(22\)xr10

Showing 50 of 1198 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-3200?
A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to an internal state not being represented correctly in the SSH state machine, which leads to an unexpected behavior. An attacker could exploit this vulnerability by creating an SSH connection to an affected device and using a specific traffic pattern that causes an error condition within that connection. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
How severe is CVE-2020-3200?
CVE-2020-3200 has a CVSS score of 7.7/10 (HIGH severity). The EPSS model estimates a 1.72% probability of exploitation in the next 30 days.
How do I fix CVE-2020-3200?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-3200?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST