CVE-2020-3496

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause the switch management CLI to stop responding, resulting in a DoS condition. This vulnerability is specific to IPv6 traffic. IPv4 traffic is not affected.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbss-ipv6-dos-tsgqbffWVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbss-ipv6-dos-tsgqbffWVendor Advisory

Published

Aug 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3490A vulnerability in the web-based management interface of Cis…4.9
• CVE-2020-3491A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-3492A vulnerability in the Flexible NetFlow Version 9 packet pro…8.6
• CVE-2020-3493Multiple vulnerabilities in the Control and Provisioning of …7.4
• CVE-2020-3494Multiple vulnerabilities in the Control and Provisioning of …7.4
• CVE-2020-3495A vulnerability in Cisco Jabber for Windows could allow an a…8.8
• CVE-2020-3497Multiple vulnerabilities in the Control and Provisioning of …7.4
• CVE-2020-3498A vulnerability in Cisco Jabber software could allow an auth…6.5
• CVE-2020-3499A vulnerability in the licensing service of Cisco Firepower …8.6
• CVE-2020-3500A vulnerability in the IPv6 implementation of Cisco StarOS c…8.6
• CVE-2020-3501Multiple vulnerabilities in the user interface of Cisco Webe…4.1
• CVE-2020-35012The Events Manager WordPress plugin before 5.9.8 does not sa…7.2