Cisco warns of actively exploited bug in carrier-grade routers

guest · Aug 31, 2020

Cisco warns of actively exploited bug in carrier-grade routers
August 31, 2020
https://www.bleepingcomputer.com/ne...ively-exploited-bug-in-carrier-grade-routers/

Cisco warned over the weekend that threat actors are trying to exploit a high severity memory exhaustion denial-of-service (DoS) vulnerability in the company's Cisco IOS XR software that runs on carrier-grade routers.

Cisco's IOS XR Network OS is deployed on multiple router platforms including NCS 540 & 560, NCS 5500, 8000, and ASR 9000 series routers.
Cisco hasn't yet released software updates to address this actively exploited security flaw but the company provides mitigation in a security advisory published over the weekend.

"On August 28, 2020, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild," Cisco explains.
Click to expand...

Affects all Cisco IOS XR routers (if multicast routing is enabled)
The CVE-2020-3566 bug exists in the Distance Vector Multicast Routing Protocol (DVMRP) feature of the IOS XR software and it may allow remote and unauthenticated attackers to exhaust the targeted device's memory.

"The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets," the security advisory explains.
According to Cisco, the security flaw tracked as CVE-2020-3566 affects any Cisco device running any Cisco IOS XR Software release if one of their active interfaces is configured under multicast routing.
Click to expand...

guest · Sep 29, 2020

Cisco fixes actively exploited bugs in carrier-grade routers
September 29, 2020
https://www.bleepingcomputer.com/ne...vely-exploited-bugs-in-carrier-grade-routers/

Cisco fixed two actively exploited and high severity memory exhaustion DoS vulnerabilities found in the IOS XR software that runs on multiple carrier-grade routers.

The Cisco IOS XR Network OS is deployed on several router platforms including the NCS 540 & 560, NCS 5500, 8000, and ASR 9000 series routers.
Ongoing attacks
Cisco warned customers on August 29th of ongoing attacks targeting carrier-grade routers running vulnerable Cisco IOS XR software versions.
Click to expand...

Security fixes available
While at the time it disclosed the attacks Cisco only provided customers with mitigation measures to block exploitation attempts, the company has now released free Software Maintenance Upgrades (SMUs) to address the two vulnerabilities.
The table embedded below contains information on what fixes should be deployed for each of the two security flaws on affected routers.
Click to expand...

Log in or Sign up

Cisco warns of actively exploited bug in carrier-grade routers

guest Guest

guest Guest

Log in or Sign up

Cisco warns of actively exploited bug in carrier-grade routers

guest Guest

guest Guest

Useful Searches