CVE-2020-3512
Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability
HIGH
7.4
CVSS Score
Published: September 24, 2020 at 05:51 PM UTC
Updated: June 17, 2026 at 03:18 AM UTC
133 products affected across 1 vendorIOS XeCatalyst 3850-24XsCatalyst 3850-Nm-2-40G
Using Cisco IOS by Cisco?
Get instant alerts when new vulnerabilities affect Cisco IOS - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.4
Exploit prediction
EPSS 0.4%
SSVC
No known exploit
Description
A vulnerability in the PROFINET handler for Link Layer Discovery Protocol (LLDP) messages of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a crash on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of LLDP messages in the PROFINET LLDP message handler. An attacker could exploit this vulnerability by sending a malicious LLDP message to an affected device. A successful exploit could allow the attacker to cause the affected device to reload.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
cisco-catalyst-3650-12x48uq (environment) · cisco-catalyst-3650-12x48ur (environment) · cisco-catalyst-3650-12x48uz (environment) · cisco-catalyst-3650-24pd (environment) · cisco-catalyst-3650-24pdm (environment) · cisco-catalyst-3650-48fqm (environment) · cisco-catalyst-3650-8x24uq (environment) · cisco-catalyst-3850-24xs (environment) · cisco-catalyst-3850-48xs (environment) · cisco-catalyst-3850-nm-2-40g (environment) · cisco-catalyst-3850-nm-8-10g (environment) · cisco-catalyst-c9200-24p (environment) · cisco-catalyst-c9200-24t (environment) · cisco-catalyst-c9200-48p (environment) · cisco-catalyst-c9200-48t (environment) · cisco-catalyst-c9200l-24p-4g (environment) · cisco-catalyst-c9200l-24p-4x (environment) · cisco-catalyst-c9200l-24pxg-2y (environment) · cisco-catalyst-c9200l-24pxg-4x (environment) · cisco-catalyst-c9200l-24t-4g (environment) · cisco-catalyst-c9200l-24t-4x (environment) · cisco-catalyst-c9200l-48p-4g (environment) · cisco-catalyst-c9200l-48p-4x (environment) · cisco-catalyst-c9200l-48pxg-2y (environment) · cisco-catalyst-c9200l-48pxg-4x (environment) · cisco-catalyst-c9200l-48t-4g (environment) · cisco-catalyst-c9200l-48t-4x (environment) · cisco-catalyst-c9300-24p (environment) · cisco-catalyst-c9300-24s (environment) · cisco-catalyst-c9300-24t (environment) · cisco-catalyst-c9300-24u (environment) · cisco-catalyst-c9300-24ux (environment) · cisco-catalyst-c9300-48p (environment) · cisco-catalyst-c9300-48s (environment) · cisco-catalyst-c9300-48t (environment) · cisco-catalyst-c9300-48u (environment) · cisco-catalyst-c9300-48un (environment) · cisco-catalyst-c9300-48uxm (environment) · cisco-catalyst-c9300l-24p-4g (environment) · cisco-catalyst-c9300l-24p-4x (environment) · cisco-catalyst-c9300l-24t-4g (environment) · cisco-catalyst-c9300l-24t-4x (environment) · cisco-catalyst-c9300l-48p-4g (environment) · cisco-catalyst-c9300l-48p-4x (environment) · cisco-catalyst-c9300l-48t-4g (environment) · cisco-catalyst-c9300l-48t-4x (environment) · cisco-catalyst-c9404r (environment) · cisco-catalyst-c9407r (environment) · cisco-catalyst-c9410r (environment) · cisco-catalyst-c9500-12q (environment) · cisco-catalyst-c9500-16x (environment) · cisco-catalyst-c9500-24q (environment) · cisco-catalyst-c9500-24y4c (environment) · cisco-catalyst-c9500-32c (environment) · cisco-catalyst-c9500-32qc (environment) · cisco-catalyst-c9500-40x (environment) · cisco-catalyst-c9500-48y4c (environment) · cisco-connected-grid-switch-2520 (environment) · cisco-ess-2020 (environment) · cisco-ess-3300 (environment) · cisco-ie-1000 (environment) · cisco-ie-2000-16ptc-g-industrial-ethernet-switch (environment) · cisco-ie-2000-16t67-industrial-ethernet-switch (environment) · cisco-ie-2000-16t67p-industrial-ethernet-switch (environment) · cisco-ie-2000-16tc-g-e-industrial-ethernet-switch (environment) · cisco-ie-2000-16tc-g-industrial-ethernet-switch (environment) · cisco-ie-2000-16tc-g-n-industrial-ethernet-switch (environment) · cisco-ie-2000-16tc-g-x-industrial-ethernet-switch (environment) · cisco-ie-2000-16tc-industrial-ethernet-switch (environment) · cisco-ie-2000-24t67-industrial-ethernet-switch (environment) · cisco-ie-2000-4s-ts-g-industrial-ethernet-switch (environment) · cisco-ie-2000-4t-g-industrial-ethernet-switch (environment) · cisco-ie-2000-4t-industrial-ethernet-switch (environment) · cisco-ie-2000-4ts-g-industrial-ethernet-switch (environment) · cisco-ie-2000-4ts-industrial-ethernet-switch (environment) · cisco-ie-2000-8t67-industrial-ethernet-switch (environment) · cisco-ie-2000-8t67p-industrial-ethernet-switch (environment) · cisco-ie-2000-8tc-g-e-industrial-ethernet-switch (environment) · cisco-ie-2000-8tc-g-industrial-ethernet-switch (environment) · cisco-ie-2000-8tc-g-n-industrial-ethernet-switch (environment) · cisco-ie-2000u-16tc-g (environment) · cisco-ie-2000u-16tc-g-x (environment) · cisco-ie-2000u-16tc-gp (environment) · cisco-ie-2000u-4s-g (environment) · cisco-ie-2000u-4t-gs (environment) · cisco-ie-2000u-4ts-g (environment) · cisco-ie-2000u-8tc-g (environment) · cisco-ie-3000 (environment) · cisco-ie-3010-16s-8pc-industrial-ethernet-switch (environment) · cisco-ie-3010-24tc-industrial-ethernet-switch (environment) · cisco-ie-3200-8p2s-e (environment) · cisco-ie-3200-8t2s-e (environment) · cisco-ie-3300-8p2s-a (environment) · cisco-ie-3300-8p2s-e (environment) · cisco-ie-3300-8t2s-a (environment) · cisco-ie-3300-8t2s-e (environment) · cisco-ie-3300-8t2x-a (environment) · cisco-ie-3300-8t2x-e (environment) · cisco-ie-3300-8u2x-a (environment) · cisco-ie-3300-8u2x-e (environment) · cisco-ie-3400-8p2s-a (environment) · cisco-ie-3400-8p2s-e (environment) · cisco-ie-3400-8t2s-a (environment) · cisco-ie-3400-8t2s-e (environment) · cisco-ie-4000-16gt4g-e (environment) · cisco-ie-4000-16t4g-e (environment) · cisco-ie-4000-4gc4gp4g-e (environment) · cisco-ie-4000-4gs8gp4g-e (environment) · cisco-ie-4000-4s8p4g-e (environment) · cisco-ie-4000-4t4p4g-e (environment) · cisco-ie-4000-4tc4g-e (environment) · cisco-ie-4000-8gs4g-e (environment) · cisco-ie-4000-8gt4g-e (environment) · cisco-ie-4000-8gt8gp4g-e (environment) · cisco-ie-4000-8s4g-e (environment) · cisco-ie-4000-8t4g-e (environment) · cisco-ie-4010-16s12p-industrial-ethernet-switch (environment) · cisco-ie-4010-4s24p-industrial-ethernet-switch (environment) · cisco-ie-5000-12s12p-10g (environment) · cisco-ie-5000-16s12p (environment) · cisco-iem-3300-14t2s (environment) · cisco-iem-3300-16p (environment) · cisco-iem-3300-16t (environment) · cisco-iem-3300-4mu-2 (environment) · cisco-iem-3300-6t2s (environment) · cisco-iem-3300-8p (environment) · cisco-iem-3300-8s (environment) · cisco-iem-3300-8t (environment) · cisco-iem-3400-8p (environment) · cisco-iem-3400-8s (environment) · cisco-iem-3400-8t (environment)
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-profinet-dos-65qYG3W5SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- ADJACENT_NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- CHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-388CWE-400
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card