VYPR
← All advisories
High severity8.6NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026

CVE-2020-3221

CVE-2020-3221

Description

A vulnerability in the Flexible NetFlow Version 9 packet processor of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of parameters in a Flexible NetFlow Version 9 record. An attacker could exploit this vulnerability by sending a malformed Flexible NetFlow Version 9 packet to the Control and Provisioning of Wireless Access Points (CAPWAP) data port of an affected device. An exploit could allow the attacker to trigger an infinite loop, resulting in a process crash that would cause a reload of the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Cisco Systems, Inc./IOS XE Software for Cisco Merakicpe-rescue
    Range: n/a
  • Cisco Systems, Inc./IOS and IOS XE Softwarellm-fuzzy
  • Cisco Systems, Inc./Catalyst 9800 Series Wireless Controllersllm-fuzzy
  • Cisco Systems, Inc./iOS Xe16 versions
    cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.