CVE-2020-3228

Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Service Vulnerability

HIGH

8.6

CVSS Score

Published: June 3, 2020 at 05:42 PM UTC

Updated: June 17, 2026 at 03:17 AM UTC

8 products affected across 1 vendorIOSIOS XeNx OS

Using Cisco IOS 15.3(2)T by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS 15.3(2)T - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A vulnerability in Security Group Tag Exchange Protocol (SXP) in Cisco IOS Software, Cisco IOS XE Software, and Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because crafted SXP packets are mishandled. An attacker could exploit this vulnerability by sending specifically crafted SXP packets to the affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.2(6)i1 15.1(1)sy 15.1(1)sy1 15.1(1)sy2 15.1(1)sy3 15.1(1)sy4 15.1(1)sy5 15.1(1)sy6 15.1(2)sy 15.1(2)sy1 15.1(2)sy1015.1(2)sy1115.1(2)sy1215.1(2)sy1315.1(2)sy1415.1(2)sy2 15.1(2)sy3 15.1(2)sy4 15.1(2)sy4a 15.1(2)sy5 15.1(2)sy6 15.1(2)sy7 15.1(2)sy8 15.1(2)sy9 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)ey 15.2(1)sy 15.2(1)sy0a 15.2(1)sy1 15.2(1)sy1a 15.2(1)sy2 15.2(1)sy3 15.2(1)sy415.2(1)sy515.2(1)sy615.2(1)sy715.2(1)sy815.2(2)e 15.2(2)e1 15.2(2)e10 15.2(2)e2 15.2(2)e3 15.2(2)e4 15.2(2)e5 15.2(2)e5a 15.2(2)e5b 15.2(2)e6 15.2(2)e7 15.2(2)e7b 15.2(2)e8 15.2(2)e9 15.2(2)e9a 15.2(2)ea 15.2(2)ea1 15.2(2)ea2 15.2(2)ea3 15.2(2)eb 15.2(2)eb1 15.2(2)eb2 15.2(2)sy 15.2(2)sy1 15.2(2)sy215.2(2)sy315.2(2a)e1 15.2(2a)e2 15.2(2b)e 15.2(3)e 15.2(3)e1 15.2(3)e2 15.2(3)e3 15.2(3)e4 15.2(3)e5 15.2(3)ea 15.2(3a)e 15.2(3m)e2 15.2(3m)e7 15.2(3m)e8 15.2(4)e 15.2(4)e1 15.2(4)e2 15.2(4)e3 15.2(4)e4 15.2(4)e5 15.2(4)e5a 15.2(4)e6 15.2(4)e7 15.2(4)e8 15.2(4)ea 15.2(4)ea1 15.2(4)ea2 15.2(4)ea3 15.2(4)ea4 15.2(4)ea5 15.2(4)ea6 15.2(4)ea7 15.2(4)ea8 15.2(4)ea9 15.2(4)ec1 15.2(4)ec2 15.2(4m)e1 15.2(4m)e2 15.2(4m)e3 15.2(4n)e2 15.2(4o)e2 15.2(4o)e3 15.2(4p)e1 15.2(4q)e1 15.2(4s)e1 15.2(5)e 15.2(5)e115.2(5)e215.2(5)e2b 15.2(5)e2c 15.2(5)ea 15.2(5a)e1 15.2(5b)e 15.2(6)e 15.2(6)e0a15.2(6)e0c15.2(6)e1 15.2(6)e1a 15.2(6)e1s 15.2(6)e2 15.2(6)e2a 15.2(6)e3 15.2(6)e4 15.2(6)eb 15.2(7)e 15.2(7)e0a 15.2(7)e0b 15.2(7)e0s 15.3(0)sy 15.3(1)sy 15.3(1)sy1 15.3(1)sy2 15.3(2)t 15.3(2)t1 15.3(2)t2 15.3(2)t3 15.3(2)t4 15.3(3)jaa1 15.3(3)jpi 15.3(3)jpj 15.3(3)m 15.3(3)m1 15.3(3)m10 15.3(3)m2 15.3(3)m3 15.3(3)m4 15.3(3)m5 15.3(3)m6 15.3(3)m7 15.3(3)m8 15.3(3)m8a 15.3(3)m9 15.3(3)xb12 15.4(1)cg1 15.4(1)sy 15.4(1)sy1 15.4(1)sy215.4(1)sy315.4(1)sy415.4(1)t 15.4(1)t1 15.4(1)t2 15.4(1)t3 15.4(1)t4 15.4(2)t 15.4(2)t1 15.4(2)t2 15.4(2)t3 15.4(2)t4 15.4(3)m 15.4(3)m1 15.4(3)m10 15.4(3)m2 15.4(3)m3 15.4(3)m4 15.4(3)m5 15.4(3)m6 15.4(3)m6a 15.4(3)m7 15.4(3)m7a 15.4(3)m8 15.4(3)m9 15.5(1)sy 15.5(1)sy115.5(1)sy215.5(1)sy315.5(1)t 15.5(1)t1 15.5(1)t2 15.5(1)t3 15.5(1)t4 15.5(2)t 15.5(2)t1 15.5(2)t2 15.5(2)t3 15.5(2)t4 15.5(2)xb 15.5(3)m 15.5(3)m1 15.5(3)m2 15.5(3)m2a 15.5(3)m3 15.5(3)m4 15.5(3)m4a 15.5(3)m4b 15.5(3)m4c 15.5(3)m5 15.5(3)m6 15.5(3)m6a 15.5(3)m7 15.5(3)m8 15.5(3)m9 15.6(1)t 15.6(1)t0a 15.6(1)t1 15.6(1)t2 15.6(1)t3 15.6(2)t 15.6(2)t0a 15.6(2)t1 15.6(2)t2 15.6(2)t3 15.6(3)m 15.6(3)m0a 15.6(3)m1 15.6(3)m1a 15.6(3)m2 15.6(3)m2a 15.6(3)m3 15.6(3)m3a 15.6(3)m4 15.6(3)m5 15.6(3)m6 15.6(3)m6a 15.7(3)m 15.7(3)m0a 15.7(3)m1 15.7(3)m2 15.7(3)m3 15.7(3)m4 15.7(3)m4a 15.7(3)m4b 15.8(3)m 15.8(3)m0a 15.8(3)m0b 15.8(3)m1 15.8(3)m1a 15.8(3)m2 15.8(3)m3 15.9(3)m 15.9(3)m0a

IOS Xe · Cisco

95%

16.1.1 16.1.2 16.1.3 16.10.1 16.10.1a 16.10.1b 16.10.1e 16.10.1s 16.10.2 16.11.1 16.11.1a 16.11.1b 16.11.1c 16.11.1s 16.2.1 16.2.2 16.3.1 16.3.1a 16.3.2 16.3.3 16.3.4 16.3.5 16.3.5b 16.3.6 16.3.7 16.3.8 16.3.9 16.4.1 16.4.2 16.4.3 16.5.1 16.5.1a 16.5.1b 16.5.2 16.5.3 16.6.1 16.6.2 16.6.3 16.6.4 16.6.4a 16.6.4s 16.6.5 16.6.5b 16.6.6 16.7.1 16.7.2 16.7.3 16.8.1 16.8.1a 16.8.1c 16.8.1s 16.8.2 16.8.3 16.9.1 16.9.1a 16.9.1c 16.9.1d 16.9.1s 16.9.2 16.9.2s 16.9.3 16.9.3a 16.9.3s 3.10.0ce 3.10.0e 3.10.0s 3.10.10s 3.10.1ae 3.10.1e 3.10.1s 3.10.1se 3.10.2as 3.10.2e 3.10.2s 3.10.2ts 3.10.3e 3.10.3s 3.10.4s 3.10.5s 3.10.6s 3.10.7s 3.10.8as 3.10.8s 3.10.9s 3.11.0e 3.11.0s 3.11.1s 3.11.2s 3.11.3s 3.11.4s 3.12.0as 3.12.0s 3.12.1s 3.12.2s 3.12.3s 3.12.4s 3.13.0as 3.13.0s 3.13.10s 3.13.1s 3.13.2as 3.13.2s 3.13.3s 3.13.4s 3.13.5as 3.13.5s 3.13.6as 3.13.6bs 3.13.6s 3.13.7as 3.13.7s 3.13.8s 3.13.9s 3.14.0s 3.14.1s 3.14.2s 3.14.3s 3.14.4s 3.15.0s 3.15.1cs 3.15.1s 3.15.2s 3.15.3s 3.15.4s 3.16.0cs 3.16.0s 3.16.10s 3.16.1as 3.16.1s 3.16.2bs 3.16.2s 3.16.3s 3.16.4as 3.16.4bs 3.16.4cs 3.16.4ds 3.16.4es 3.16.4gs 3.16.5as 3.16.5bs 3.16.5s 3.16.6bs 3.16.6s 3.16.7as 3.16.7bs 3.16.7s 3.16.8s 3.16.9s 3.17.0s 3.17.1as 3.17.1s 3.17.2s 3.17.3s 3.17.4s 3.18.0as 3.18.1asp 3.18.1sp 3.18.2asp 3.18.3asp 3.18.3bsp 3.18.3sp 3.18.4sp 3.18.5sp 3.18.6sp 3.3.0se 3.3.0xo 3.3.1se 3.3.1xo 3.3.2se 3.3.2xo 3.3.3se 3.3.4se 3.3.5se 3.5.0e 3.5.1e 3.5.2e 3.5.3e 3.6.0ae 3.6.0be 3.6.0e 3.6.10e 3.6.1e 3.6.2ae 3.6.3e 3.6.4e 3.6.5ae 3.6.5be 3.6.5e 3.6.6e 3.6.7ae 3.6.7be 3.6.7e 3.6.8e 3.6.9ae 3.6.9e 3.7.0e 3.7.1e 3.7.2e 3.7.3e 3.7.4e 3.7.5e 3.8.0e 3.8.1e 3.8.2e 3.8.3e 3.8.4e 3.8.5ae 3.8.5e 3.8.6e 3.8.7e 3.8.8e 3.9.0as 3.9.0e 3.9.0s 3.9.1e 3.9.1s 3.9.2be3.9.2e3.9.2s

Nx OS · Cisconpm

95%

5.2(1)sv3(3.1)5.2(1)sv3(3.15)5.2(1)sv3(4.1)5.2(1)sv3(4.1a)5.2(1)sv3(4.1b)5.2(1)sv5(1.1)5.2(1)sv5(1.2)5.2(1)sv5(1.3)8.0(1)

cisco-nexus-1000v (environment) · cisco-nexus-7000-10-slot (environment) · cisco-nexus-7000-18-slot (environment) · cisco-nexus-7000-4-slot (environment) · cisco-nexus-7000-9-slot (environment)

Nexus 1000V · Ciscodevice

80%

All versions

Nexus 7000 10-slot · Ciscodevice

80%

All versions

Nexus 7000 18-slot · Ciscodevice

80%

All versions

Nexus 7000 4-Slot · Ciscodevice

80%

All versions