CVE-2020-3510
Estado: ModificadaAlta (8.6)—
A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient error handling when parsing DNS requests. An attacker could exploit this vulnerability by sending a series of malicious DNS requests to an Umbrella Connector client interface of an affected device. A successful exploit could allow the attacker to cause a crash of the iosd process, which triggers a reload of the affected device.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 8.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.38%
- Percentil entre todas las CVEs puntuadas: 71
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access - Impacto principal
T1499.004Application or System Exploitationimpact
Fuente: mapeo oficial MITRE CTID (CVE → ATT&CK).
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (1)
CWE
- CWE-388
- CWE-400
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-3510",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2020-3510",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-11-13T17:12:48.373449Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 3.9
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.6,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco IOS XE Software",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-09-24T18:15:21.150",
"references": [
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-umbrella-dos-t2QMUX37",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-umbrella-dos-t2QMUX37",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-388"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Umbrella Connector component of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to trigger a reload, resulting in a denial of service condition on an affected device. The vulnerability is due to insufficient error handling when parsing DNS requests. An attacker could exploit this vulnerability by sending a series of malicious DNS requests to an Umbrella Connector client interface of an affected device. A successful exploit could allow the attacker to cause a crash of the iosd process, which triggers a reload of the affected device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en el componente Umbrella Connector de Cisco IOS XE Software para Cisco Catalyst 9200 Series Switches, podría permitir a un atacante remoto no autenticado desencadenar una recarga, resultando en una condición de denegación de servicio en un dispositivo afectado. La vulnerabilidad es debido a un manejo insuficiente de errores cuando se analizan las peticiones DNS. Un atacante podría explotar esta vulnerabilidad mediante el envío de una serie de peticiones DNS maliciosas a una interfaz del cliente de Umbrella Connector de un dispositivo afectado. Una explotación con éxito podría permitir al atacante causar un bloqueo del proceso iosd, lo que desencadena una recarga del dispositivo afectado."
}
],
"lastModified": "2026-06-17T03:18:28.253",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C98DED36-D4B5-48D6-964E-EEEE97936700"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E306B09C-CB48-4067-B60C-5F738555EEAC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200-24p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "18736C74-F68F-4D0B-AE2B-4BC1834EF794"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200-24t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D223C2AB-22A4-42B5-8BBB-78E2CBF23B40"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200-48p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BDD3EAA2-8F25-4099-B76F-5ACC3BE34610"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200-48t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AE9BD57F-BDAC-46DD-AF87-8914B29670F2"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24p-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AFCEBFFC-DD60-4CB1-A7F2-9AC09977BA4F"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24p-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B9F7B21F-1DAA-45C7-8C24-D3A19F1C5459"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24pxg-2y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1C4F9918-E075-4F78-AFD7-0BB7FA97C1F6"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24pxg-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C7E00A0B-A58E-472F-B107-0FE106751F2D"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24t-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BCB45406-5216-4A11-B8D3-C44639DC26B0"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24t-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "215D01AE-3767-482A-85C5-3361506F0AC3"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48p-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A06E37A8-166F-4534-9089-D20B1227F4DD"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48p-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B9D6DAE3-BAD0-46D8-B899-45B955F532F7"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48pxg-2y:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "327167E8-4B65-4F9D-8760-34CDA03887CA"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48pxg-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A0DA2253-C6A9-4749-B313-6552628A96F3"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48t-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C925086A-94B9-4FE0-9FEB-3242C1217453"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48t-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6EB14B34-4035-41D2-834B-7FB069264207"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F257D2BE-7618-4B6A-AFCE-6D9D0084FA1D"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8BA927CE-9D8E-4BC0-9EA6-641E7C4F71B3"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9A46D298-1685-410E-879C-2EBC45C185AC"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CA4ACF54-E576-4D8A-A4E6-17A37EEC53DA"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24ux:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "196A7C06-8371-479D-973D-591DEB181739"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EE42511E-9883-4779-A8E5-FC3E16EF2793"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DB06AD21-91A7-46B8-8F44-683828A5422D"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48t:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5DA169AF-3743-4051-B63B-FF6E1ADCD886"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48u:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D13CF5B-4482-4C7D-8D6A-E220F3E4F868"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48un:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "92134C0A-4E5B-43EF-8439-484DF504C43C"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48uxm:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26ECF9BD-F632-4A02-8993-C0D44B91289C"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24p-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48730DB5-94AF-4BE7-8047-52B8B47CE35A"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24p-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E3A88142-3284-4C25-8774-36004B5F9087"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24t-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8EB76311-4B6D-4897-A683-4244E92BD570"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24t-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CDDA2975-CDB7-4182-A03E-D34F15CDF6F1"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48p-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "35B9D0B5-4BE1-490E-9A68-00A3D357BC3D"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48p-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71FA2F5A-6146-4142-96A8-552118E4BB67"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48t-4g:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BEF786D6-F28F-49D8-A15C-BFD0AA934355"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48t-4x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CA32B0AC-1B0A-4ED8-8532-9C7BE6E059D4"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9404r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1FEFF895-6E4A-4108-BD25-D7DC83154832"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9407r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A485A9A0-2EEC-4C13-846C-0DE2265B2A31"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9410r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3B9F1ACA-9D67-4BF0-A357-40D39A61ED00"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-12q:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6BFEE45F-C5AC-483D-9DE6-4CEB98D80A0C"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-16x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD6F5BBC-4627-4A3E-B827-3CEE7EE969D0"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-24q:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8B2E41E2-00CE-42C4-8C91-9307D76F5D7A"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-24y4c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98CB2D23-B5F8-4FA9-8431-3B0124CE2140"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-32c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E8A8BA9F-3361-43CD-8031-A5DF0AD68BEB"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-32qc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6DFE4BB6-FC9A-42B3-B8A0-2610D71BB9B8"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-40x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "53D13F1D-345D-45D5-9000-DAFE8A85D71B"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9500-48y4c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8CFB064E-E390-47B5-AA76-5D3D2E368055"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9600-lc-24c:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BBE82D4C-B165-4060-8A05-740137833004"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9600-lc-48s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4859684E-FF82-43E6-9B86-B4FD54A124E5"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9600-lc-48tx:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1EE2B840-6A66-46FC-87C4-6D8D867E2394"
},
{
"criteria": "cpe:2.3:h:cisco:catalyst_c9600-lc-48yl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "06B9B478-24B0-4C99-9CF6-1D7A2C9F5A5E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}