CVE-2020-3426 Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability

High 7.5 Published 24 Sep 2020 Updated 13 Nov 2024

Unauthenticated remote attackers can read sensitive data or cause denial of service on Cisco Industrial Routers via crafted VLPWA packets.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-3426?

CVE-2020-3426 is a high-severity vulnerability in Cisco Ios, published on 24 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data or cause a denial of service (DoS) condition. The vulnerability is due to a lack of input and validation checking mechanisms for virtual-LPWA (VLPWA) protocol modem messages. An attacker could exploit this vulnerability by supplying crafted packets to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data or cause the VLPWA interface of the affected device to shut down, resulting in DoS condition.

Weakness: CWE-20, CWE-264

Which versions are affected by CVE-2020-3426?

It affects 1 product.

Products include Cisco Ios.

How do I fix CVE-2020-3426?

No fix has been published for CVE-2020-3426 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-3426 being exploited?

There is no known exploitation of CVE-2020-3426 in the wild and no public exploit code.

All Cisco Ios vulnerabilities

Sources

Also known as GHSA-g97r-rvqc-x2fm.