Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xe:15.8\(3\)m3:*:*:*:*:*:*:*

part: o version: 15.8(3)m3 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIos Xe (e06dcf6a-4e40-54fa-8931-59bc15e7d5ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-3408 vulnerable 2026-06-08 05:25:55.115702 Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability
HIGH (8.6)
A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability occurs because the regular expression (regex) engine that is used with the Split DNS feature of affected releases may time out when it processes the DNS name list configuration. An attacker could exploit this vulnerability by trying to resolve an address or hostname that the affected device handles. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Published: 2020-09-24T18:01:59.804Z
Updated: 2024-11-13T17:55:19.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3407 vulnerable 2026-06-08 05:25:55.099457 Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability
HIGH (8.6)
A vulnerability in the RESTCONF and NETCONF-YANG access control list (ACL) function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect processing of the ACL that is tied to the RESTCONF or NETCONF-YANG feature. An attacker could exploit this vulnerability by accessing the device using RESTCONF or NETCONF-YANG. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Published: 2020-09-24T18:02:04.555Z
Updated: 2024-11-13T17:55:10.495Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.