CVE-2020-3428

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability

MEDIUM

6.5

CVSS Score

Published: September 24, 2020 at 05:55 PM UTC

Updated: June 17, 2026 at 03:18 AM UTC

74 products affected across 1 vendorIOS XeAsr 1002-xAsr 1006

Using Cisco IOS XE Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS XE Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

A vulnerability in the WLAN Local Profiling feature of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect parsing of HTTP packets while performing HTTP-based endpoint device classifications. An attacker could exploit this vulnerability by sending a crafted HTTP packet to an affected device. A successful exploit could cause an affected device to reboot, resulting in a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS Xe · Cisco

95%

All versions

cisco-1100-integrated-services-router (environment) · cisco-1101-integrated-services-router (environment) · cisco-1109-integrated-services-router (environment) · cisco-1111x-integrated-services-router (environment) · cisco-111x-integrated-services-router (environment) · cisco-1120-integrated-services-router (environment) · cisco-1160-integrated-services-router (environment) · cisco-4221-integrated-services-router (environment) · cisco-4321-integrated-services-router (environment) · cisco-4331-integrated-services-router (environment) · cisco-4351-integrated-services-router (environment) · cisco-4431-integrated-services-router (environment) · cisco-4451-x-integrated-services-router (environment) · cisco-4461-integrated-services-router (environment) · cisco-asr-1001-hx (environment) · cisco-asr-1001-x (environment) · cisco-asr-1002-hx (environment) · cisco-asr-1002-x (environment) · cisco-asr-1004 (environment) · cisco-asr-1006 (environment) · cisco-asr-1006-x (environment) · cisco-asr-1009-x (environment) · cisco-asr-1013 (environment) · cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-9800-l-c (environment) · cisco-catalyst-9800-l-f (environment) · cisco-catalyst-c9200-24p (environment) · cisco-catalyst-c9200-24t (environment) · cisco-catalyst-c9200-48p (environment) · cisco-catalyst-c9200-48t (environment) · cisco-catalyst-c9200l-24p-4g (environment) · cisco-catalyst-c9200l-24p-4x (environment) · cisco-catalyst-c9200l-24pxg-2y (environment) · cisco-catalyst-c9200l-24pxg-4x (environment) · cisco-catalyst-c9200l-24t-4g (environment) · cisco-catalyst-c9200l-24t-4x (environment) · cisco-catalyst-c9200l-48p-4g (environment) · cisco-catalyst-c9300-24p (environment) · cisco-catalyst-c9300-24s (environment) · cisco-catalyst-c9300-24t (environment) · cisco-catalyst-c9300-24u (environment) · cisco-catalyst-c9300-24ux (environment) · cisco-catalyst-c9300-48p (environment) · cisco-catalyst-c9300-48s (environment) · cisco-catalyst-c9300-48t (environment) · cisco-catalyst-c9300-48u (environment) · cisco-catalyst-c9300-48un (environment) · cisco-catalyst-c9300-48uxm (environment) · cisco-catalyst-c9300l-24p-4g (environment) · cisco-catalyst-c9300l-24p-4x (environment) · cisco-catalyst-c9300l-24t-4g (environment) · cisco-catalyst-c9300l-24t-4x (environment) · cisco-catalyst-c9300l-48p-4g (environment) · cisco-catalyst-c9300l-48p-4x (environment) · cisco-catalyst-c9300l-48t-4g (environment) · cisco-catalyst-c9300l-48t-4x (environment) · cisco-catalyst-c9404r (environment) · cisco-catalyst-c9407r (environment) · cisco-catalyst-c9410r (environment) · cisco-catalyst-c9500-12q (environment) · cisco-catalyst-c9500-16x (environment) · cisco-catalyst-c9500-24q (environment) · cisco-catalyst-c9500-24y4c (environment) · cisco-catalyst-c9500-32c (environment) · cisco-catalyst-c9500-32qc (environment) · cisco-catalyst-c9500-40x (environment) · cisco-catalyst-c9500-48y4c (environment) · cisco-catalyst-c9600-switch (environment) · cisco-cloud-services-router-1000v (environment) · cisco-integrated-services-virtual-router (environment)

1100 Integrated Services Router · Ciscodevice

80%

All versions

1101 Integrated Services Router · Ciscodevice

80%

All versions

1109 Integrated Services Router · Ciscodevice

80%

All versions

1111X Integrated Services Router · Ciscodevice

80%

All versions