title: Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability
description: A vulnerability in the Easy Virtual Switching System (VSS) of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol (CDP) packets used with the Easy Virtual Switching System. An attacker could exploit this vulnerability by sending a specially crafted CDP packet. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
problem types: CWE-20
affected:
{
product: Cisco IOS XE Software
vendor: Cisco
versions:
status: affected, version: 3.6.0E
status: affected, version: 3.6.1E
status: affected, version: 3.6.0aE
status: affected, version: 3.6.0bE
status: affected, version: 3.6.2aE
status: affected, version: 3.6.2E
status: affected, version: 3.6.3E
status: affected, version: 3.6.4E
status: affected, version: 3.6.5E
status: affected, version: 3.6.6E
status: affected, version: 3.6.5aE
status: affected, version: 3.6.5bE
status: affected, version: 3.6.7E
status: affected, version: 3.6.8E
status: affected, version: 3.6.7aE
status: affected, version: 3.6.7bE
status: affected, version: 3.6.9E
status: affected, version: 3.6.10E
status: affected, version: 3.7.0E
status: affected, version: 3.7.1E
status: affected, version: 3.7.2E
status: affected, version: 3.7.3E
status: affected, version: 3.8.0E
status: affected, version: 3.8.1E
status: affected, version: 3.8.2E
status: affected, version: 3.8.3E
status: affected, version: 3.8.4E
status: affected, version: 3.8.5E
status: affected, version: 3.8.5aE
status: affected, version: 3.8.6E
status: affected, version: 3.8.7E
status: affected, version: 3.9.0E
status: affected, version: 3.9.1E
status: affected, version: 3.9.2E
status: affected, version: 3.9.2bE
status: affected, version: 16.9.2h
status: affected, version: 3.10.0E
status: affected, version: 3.10.1E
status: affected, version: 3.10.0cE
status: affected, version: 3.10.2E
status: affected, version: 3.10.1aE
status: affected, version: 3.10.1sE
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.0
]
exploits: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.