CVE-2020-3449

A vulnerability in the Border Gateway Protocol (BGP) additional paths feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent authorized users from monitoring the BGP status and cause the BGP process to stop processing new updates, resulting in a denial of service (DOS) condition. The vulnerability is due to an incorrect calculation of lexicographical order when displaying additional path information within Cisco IOS XR Software, which causes an infinite loop. An attacker could exploit this vulnerability by sending a specific BGP update from a BGP neighbor peer session of an affected device; an authorized user must then issue a show bgp command for the vulnerability to be exploited. A successful exploit could allow the attacker to prevent authorized users from properly monitoring the BGP status and prevent BGP from processing new updates, resulting in outdated information in the routing and forwarding tables.

• CWE-754
• CWE-754

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgp-ErKEqAerVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgp-ErKEqAerVendor Advisory

Published

Aug 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3442The DuoConnect client enables users to establish SSH connect…5.7
• CVE-2020-3443A vulnerability in Cisco Smart Software Manager On-Prem (SSM…8.8
• CVE-2020-3444A vulnerability in the packet filtering features of Cisco SD…7.5
• CVE-2020-3446A vulnerability in Cisco Virtual Wide Area Application Servi…9.8
• CVE-2020-3447A vulnerability in the CLI of Cisco AsyncOS for Cisco Email …6.5
• CVE-2020-3448A vulnerability in an access control mechanism of Cisco Cybe…5.8
• CVE-2020-3450A vulnerability in the web-based management interface of Cis…4.9
• CVE-2020-3451Multiple vulnerabilities in the web-based management interfa…4.7
• CVE-2020-3452A vulnerability in the web services interface of Cisco Adapt…7.5
• CVE-2020-3453Multiple vulnerabilities in the web-based management interfa…6.8
• CVE-2020-3454A vulnerability in the Call Home feature of Cisco NX-OS Soft…7.2
• CVE-2020-3455A vulnerability in the secure boot process of Cisco FXOS Sof…7.8