Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-3231

A vulnerability in the 802.1X feature of Cisco Catalyst 2960-L Series Switches and Cisco Catalyst CDB-8P Switches could allow an unauthenticated, adjacent attacker to forward broadcast traffic before being authenticated on the port. The vulnerability exists because broadcast traffic that is received on the 802.1X-enabled port is mishandled. An attacker could exploit this vulnerability by sending broadcast traffic on the port before being authenticated. A successful exploit could allow the attacker to send and receive broadcast traffic on the 802.1X-enabled port before authentication.

  • Published: Jun 3, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-3231
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.7
  • AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.9
  • AV:A/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
cisco / ios 15.2(5c)e 15.2(5c)e.x
cisco / ios 15.2(5)e2 15.2(5)e2.x
cisco / ios 15.2(5b)e 15.2(5b)e.x
cisco / ios 15.2(5)ex 15.2(5)ex.x
cisco / ios 15.2(5a)e 15.2(5a)e.x
cisco / ios 15.2(6)e1 15.2(6)e1.x
cisco / ios 15.2(6)e 15.2(6)e.x
cisco / ios 15.2(6)e0c 15.2(6)e0c.x
cisco / ios 15.2(6)e1a 15.2(6)e1a.x
cisco / ios 15.2(6)e1s 15.2(6)e1s.x
cisco / ios 15.3(3)jaa1 15.3(3)jaa1.x
cisco / ios 15.2(6)e2b 15.2(6)e2b.x
cisco / ios 15.2(6)e2 15.2(6)e2.x
cisco / ios 15.2(7)e 15.2(7)e.x
cisco / ios 15.2(7)e0s 15.2(7)e0s.x
cisco / ios 15.2(7)e0a 15.2(7)e0a.x
cisco / ios 15.2(7a)e0b 15.2(7a)e0b.x
cisco / ios 15.2(6)e4 15.2(6)e4.x
cisco / ios 15.2(6)e3 15.2(6)e3.x
cisco / ios 15.2(7)e0b 15.2(7)e0b.x
cisco / ios 15.3(3)jpj 15.3(3)jpj.x
cisco / ios 15.2(7b)e0b 15.2(7b)e0b.x