CVE-2020-3359

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability

HIGH

8.6

CVSS Score

Published: September 24, 2020 at 06:02 PM UTC

Updated: June 17, 2026 at 03:18 AM UTC

15 products affected across 1 vendorIOS XeCatalyst 9800-LCatalyst 9800-80

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.6

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A vulnerability in the multicast DNS (mDNS) feature of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device. A successful exploit could cause a device to reload, resulting in a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

16.12.1

cisco-2610xm (environment) · cisco-2611xm (environment) · cisco-2612 (environment) · cisco-2620xm (environment) · cisco-2621xm (environment) · cisco-2650xm (environment) · cisco-2651xm (environment) · cisco-2691 (environment) · cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-9800-l-c (environment) · cisco-catalyst-9800-l-f (environment)

2610Xm · Ciscodevice

80%

All versions

2611Xm · Ciscodevice

80%

All versions

2612 · Ciscodevice

80%

All versions

2620Xm · Ciscodevice

80%

All versions