CVE-2020-3511
Estado: ModificadaAlta (7.4)—
A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the ISDN Q.931 messages are processed. An attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message to an affected device. A successful exploit could allow the attacker to cause the process to crash, resulting in a reload of the affected device.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 7.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.43%
- Percentil entre todas las CVEs puntuadas: 36
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-20
- CWE-20
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-3511",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2020-3511",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-11-13T17:23:34.355395Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.1,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 2.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.4,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IOS",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-09-24T18:15:21.230",
"references": [
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-isdn-q931-dos-67eUZBTf",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-isdn-q931-dos-67eUZBTf",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation when the ISDN Q.931 messages are processed. An attacker could exploit this vulnerability by sending a malicious ISDN Q.931 message to an affected device. A successful exploit could allow the attacker to cause the process to crash, resulting in a reload of the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el subsistema ISDN de Cisco IOS Software y Cisco IOS XE Software, podría permitir a un atacante adyacente no autenticado causar una recarga de un dispositivo afectado, resultando en una condición de denegación de servicio (DoS). La vulnerabilidad es debido a una comprobación insuficiente de la entrada cuando son procesados los mensajes ISDN Q.931. Un atacante podría explotar esta vulnerabilidad mediante el envío de un mensaje ISDN Q.931 malicioso hacia un dispositivo afectado. Una explotación con éxito podría permitir al atacante causar que el proceso se bloquee, resultando en una recarga del dispositivo afectado."
}
],
"lastModified": "2026-06-17T03:18:28.423",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:15.1\\(4\\)m:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "698E9E84-006D-4EA6-A65C-60BE80BAF35C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0F77CD6A-83DA-4F31-A128-AD6DAECD623B"
},
{
"criteria": "cpe:2.3:h:cisco:1100-4gltegb_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62564BB8-1282-4597-A645-056298BE7CCB"
},
{
"criteria": "cpe:2.3:h:cisco:1100-4gltena_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "80E9CC47-3D7C-437A-85BE-4BB94C8AF1B8"
},
{
"criteria": "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
},
{
"criteria": "cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2B68B363-3C57-4E95-8B13-0F9B59D551F7"
},
{
"criteria": "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
},
{
"criteria": "cpe:2.3:h:cisco:1100-lte_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBE4E146-1D77-4F15-AE58-3C1CE5DB62C5"
},
{
"criteria": "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
},
{
"criteria": "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
},
{
"criteria": "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
},
{
"criteria": "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
},
{
"criteria": "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
},
{
"criteria": "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B80890A8-E3D3-462C-B125-9E9BC6525B02"
},
{
"criteria": "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
},
{
"criteria": "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0547E196-5991-4C33-823A-342542E9DFD3"
},
{
"criteria": "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
},
{
"criteria": "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
},
{
"criteria": "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D916389F-54DB-44CB-91DD-7CE3C7059350"
},
{
"criteria": "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03A273EE-41C1-41E9-9002-46F83FC6533F"
},
{
"criteria": "cpe:2.3:h:cisco:4321\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "05C90C43-2D7D-43F8-AD7F-421878909AE2"
},
{
"criteria": "cpe:2.3:h:cisco:4321\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "445597DA-7EEC-470D-9A71-BC43A9F7DE5E"
},
{
"criteria": "cpe:2.3:h:cisco:4321\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86049773-C88D-4A26-A0D3-D40F3C312AEC"
},
{
"criteria": "cpe:2.3:h:cisco:4331\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6AB4B7C2-4D45-4267-BCBB-57D36C6104A3"
},
{
"criteria": "cpe:2.3:h:cisco:4331\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3B8A4630-8B21-4994-8EF5-E105593A64E5"
},
{
"criteria": "cpe:2.3:h:cisco:4331\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F799DC02-EB06-458C-8545-A174475FE7A2"
},
{
"criteria": "cpe:2.3:h:cisco:4351\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B89FBA68-A8ED-4C5A-916E-A68468F59730"
},
{
"criteria": "cpe:2.3:h:cisco:4351\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CD272E6E-2ED1-4408-8FF7-0B82F9DCBEF8"
},
{
"criteria": "cpe:2.3:h:cisco:4351\\/k9_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DC278B77-AD63-42AD-B9E8-EE4DE97E27E9"
},
{
"criteria": "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
},
{
"criteria": "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E8B60888-6E2B-494E-AC65-83337661EE7D"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FE2182E7-C813-4966-A36C-E648A9344299"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED7C321E-F083-4AB6-96A0-D6358980441E"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "09C913FF-63D5-43FB-8B39-598EF436BA5A"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E4376E56-A21C-4642-A85D-439C8E21CD7F"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "444F688F-79D0-4F22-B530-7BD520080B8F"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7428E0A8-1641-47FB-9CA9-34311DEF660D"
},
{
"criteria": "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "854D9594-FE84-4E7B-BA21-A3287F2DC302"
},
{
"criteria": "cpe:2.3:h:cisco:asr1001-hx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0C24227E-9FF6-4757-A342-958CA4B8BF63"
},
{
"criteria": "cpe:2.3:h:cisco:asr1001-hx-rf:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9E529335-18D1-4CEC-A8D5-CC1CA33D64F5"
},
{
"criteria": "cpe:2.3:h:cisco:asr1001-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3072DEFA-61D6-413F-97FD-F64C0E90155C"
},
{
"criteria": "cpe:2.3:h:cisco:asr1001-x-rf:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D9FBFB5C-347B-4F73-93BE-4D3137D8F93A"
},
{
"criteria": "cpe:2.3:h:cisco:asr1001-x-ws:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9F040372-CDAD-4AC4-9B7C-BFF9658B6BF2"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-hx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C33862F1-652A-4F60-BD3E-A6B3733E56A9"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-hx-rf:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "130205FD-CA31-4E49-B8C4-181840270C70"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-hx-ws:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "908A56D8-64AF-4813-9D4D-C429C0603A31"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "03A2AA1C-7568-4BB6-BBD3-8E03D32CDA1F"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-x-rf:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53DAF422-7E0B-44EB-AD8D-4643A9711739"
},
{
"criteria": "cpe:2.3:h:cisco:asr1002-x-ws:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1F7F661E-335C-4123-9363-E2E5D51846C1"
},
{
"criteria": "cpe:2.3:h:cisco:csr1000v:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62081293-8355-4197-A5A8-1E434B808680"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}