High severity8.6NVD Advisory· Published Sep 24, 2020· Updated Jun 17, 2026

CVE-2020-3527

Description

A vulnerability in the Polaris kernel of Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to crash the device. The vulnerability is due to insufficient packet size validation. An attacker could exploit this vulnerability by sending jumbo frames or frames larger than the configured MTU size to the management interface of this device. A successful exploit could allow the attacker to crash the device fully before an automatic recovery.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./iOS Xe
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
Range: >=16.9.0,<16.9.5
Cisco Systems, Inc./Catalyst 4000 series switchesllm-fuzzy
Cisco Systems, Inc./IOS XE Software for Cisco Merakicpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-JP-DOS-g5FfGm8ynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000