© 2026 vulntracker.io

CVE-2020-3225

Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service Vulnerabilities

HIGH

8.6

CVSS Score

Published: June 3, 2020 at 05:42 PM UTC

Updated: June 17, 2026 at 03:17 AM UTC

2 products affected across 1 vendorIOSIOS Xe

Using Cisco IOS 12.2(55)SE by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS 12.2(55)SE - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerabilities are due to insufficient input processing of CIP traffic. An attacker could exploit these vulnerabilities by sending crafted CIP traffic to be processed by an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.2(44)ex 12.2(44)ex1 12.2(46)se1 12.2(46)se2 12.2(50)se 12.2(50)se1 12.2(50)se2 12.2(50)se3 12.2(50)se4 12.2(50)se5 12.2(52)se 12.2(52)se1 12.2(55)se 12.2(55)se10 12.2(55)se11 12.2(55)se12 12.2(55)se13 12.2(55)se13a 12.2(55)se3 12.2(55)se4 12.2(55)se5 12.2(55)se6 12.2(55)se7 12.2(55)se9 12.2(58)se 12.2(58)se1 12.2(58)se212.2(60)ez1615.0(1)ey 15.0(1)ey1 15.0(1)ey2 15.0(2)ek 15.0(2)ek1 15.0(2)ex2 15.0(2)ex8 15.0(2)ey 15.0(2)ey1 15.0(2)ey2 15.0(2)ey3 15.0(2)se 15.0(2)se1 15.0(2)se10 15.0(2)se10a 15.0(2)se11 15.0(2)se12 15.0(2)se13 15.0(2)se13a 15.0(2)se2 15.0(2)se3 15.0(2)se4 15.0(2)se5 15.0(2)se6 15.0(2)se7 15.0(2)se8 15.0(2)se915.0(2)sg11a15.2(1)ey 15.2(2)e 15.2(2)e1 15.2(2)e10 15.2(2)e2 15.2(2)e3 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)e5b 15.2(2)e6 15.2(2)e7 15.2(2)e7b 15.2(2)e8 15.2(2)e9 15.2(2)ea 15.2(2)ea1 15.2(2)ea2 15.2(2)ea3 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2b)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)e4 15.2(3)e5 15.2(3)ea 15.2(4)e10 15.2(4)e9 15.2(4)ea 15.2(4)ea1 15.2(4)ea2 15.2(4)ea3 15.2(4)ea4 15.2(4)ea5 15.2(4)ea6 15.2(4)ea7 15.2(4)ea8 15.2(4)ea9 15.2(4)ec1 15.2(4)ec2 15.2(4)jaz 15.2(4)jaz1 15.2(5)e 15.2(5)e115.2(5)e215.2(5)e2b 15.2(5)e2c 15.2(5)ea 15.2(5a)e1 15.2(6)e 15.2(6)e0a15.2(6)e0c15.2(6)e1 15.2(6)e1a 15.2(6)e1s 15.2(6)e2a 15.2(6)e3 15.2(6)eb 15.2(7)e 15.2(7)e0b 15.2(7)e0s15.2(7a)e0b15.2(7b)e0b15.3(3)ja1 15.3(3)ja10 15.3(3)ja11 15.3(3)ja12 15.3(3)ja1n 15.3(3)ja4 15.3(3)ja5 15.3(3)ja6 15.3(3)ja7 15.3(3)ja8 15.3(3)jaa 15.3(3)jaa1 15.3(3)jax 15.3(3)jax1 15.3(3)jax2 15.3(3)jb 15.3(3)jbb 15.3(3)jbb1 15.3(3)jbb2 15.3(3)jbb4 15.3(3)jbb5 15.3(3)jbb6 15.3(3)jbb6a 15.3(3)jbb8 15.3(3)jc 15.3(3)jc1 15.3(3)jc14 15.3(3)jc2 15.3(3)jc3 15.3(3)jc4 15.3(3)jc5 15.3(3)jc6 15.3(3)jc8 15.3(3)jc9 15.3(3)jd 15.3(3)jd11 15.3(3)jd12 15.3(3)jd13 15.3(3)jd14 15.3(3)jd16 15.3(3)jd17 15.3(3)jd2 15.3(3)jd3 15.3(3)jd4 15.3(3)jd5 15.3(3)jd6 15.3(3)jd7 15.3(3)jd8 15.3(3)jd9 15.3(3)je 15.3(3)jf 15.3(3)jf1 15.3(3)jf10 15.3(3)jf13 15.3(3)jf2 15.3(3)jf4 15.3(3)jf5 15.3(3)jf6 15.3(3)jf7 15.3(3)jf8 15.3(3)jf9 15.3(3)jf99 15.3(3)jg 15.3(3)jg1 15.3(3)jh 15.3(3)jh1 15.3(3)ji1 15.3(3)ji3 15.3(3)ji4 15.3(3)ji5 15.3(3)jj 15.3(3)jj1 15.3(3)jk 15.3(3)jk1a 15.3(3)jk1t 15.3(3)jk2a 15.3(3)jk3 15.3(3)jk99 15.3(3)jn 15.3(3)jn1 15.3(3)jn11 15.3(3)jn13 15.3(3)jn14 15.3(3)jn15 15.3(3)jn2 15.3(3)jn3 15.3(3)jn4 15.3(3)jn6 15.3(3)jn7 15.3(3)jn8 15.3(3)jn9 15.3(3)jnb 15.3(3)jnb1 15.3(3)jnb2 15.3(3)jnb3 15.3(3)jnb4 15.3(3)jnb5 15.3(3)jnb6 15.3(3)jnc 15.3(3)jnc1 15.3(3)jnc2 15.3(3)jnc3 15.3(3)jnc4 15.3(3)jnd 15.3(3)jnd1 15.3(3)jnd2 15.3(3)jnd3 15.3(3)jnp 15.3(3)jnp1 15.3(3)jnp3 15.3(3)jpb 15.3(3)jpb1 15.3(3)jpc 15.3(3)jpc1 15.3(3)jpc2 15.3(3)jpc315.3(3)jpc515.3(3)jpc99 15.3(3)jpd 15.3(3)jpi 15.3(3)jpi3 15.3(3)jpj

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cipdos-hkfTZXEx

References (1)

Vendor Advisoryx_refsource_CISCOPatch

Source: [email protected]

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cipdos-hkfTZXEx

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.6HIGH[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: CHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card