CVE-2020-3574

CWE-3714 documents4 sources
Severity
7.5HIGH
EPSS
3.2%
top 13.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Cisco IP Dect 210 FirmwareCisco IP Dect 6825 FirmwareCisco IP Phone 8811 Firmware+6 more
Timeline
PublishedNov 6
Latest updateMay 24

Description

A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to stop responding to incoming calls, drop connected calls, or unexpectedly reload. The vulnerability is due to insufficient TCP ingress packet rate limiting. An attacker could exploit this vulnerability by sending a high and sustained rate of crafted TCP traffic to the targeted device. A successful exploit could allow the attacker to impact operations …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages9 packages

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gp65-v6f3-j928: A vulnerability in the TCP packet processing functionality of Cisco IP Phones could allow an unauthenticated, remote attacker to cause the phone to st↗2022-05-24
▶
CVEList
Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability↗2020-11-06
▶

📋Vendor Advisories

1
Cisco
Cisco IP Phone TCP Packet Flood Denial of Service Vulnerability↗2020-11-04
▶
CVE-2020-3574 (HIGH CVSS 7.5) | A vulnerability in the TCP packet p | cvebase.io