Description
A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Published: 2020-02-05
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2020-24391 A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
History

Fri, 15 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Cisco Asr 9000v Asr 9001 Asr 9006 Asr 9010 Asr 9901 Asr 9904 Asr 9906 Asr 9910 Asr 9912 Asr 9922 Crs Firepower 4110 Firepower 4115 Firepower 4120 Firepower 4125 Firepower 4140 Firepower 4145 Firepower 4150 Firepower 9300 Firepower Extensible Operating System Fxos Ios Xr Mds 9132t Mds 9148s Mds 9148t Mds 9216 Mds 9216a Mds 9216i Mds 9222i Mds 9506 Mds 9509 Mds 9513 Mds 9706 Mds 9710 Mds 9718 Ncs 5001 Ncs 5002 Ncs 5011 Ncs 540-12z20g-sys-a Ncs 540-12z20g-sys-d Ncs 540-24z8q2c-sys Ncs 540-28z4c-sys-a Ncs 540-28z4c-sys-d Ncs 540-acc-sys Ncs 540l Ncs 540x-12z16g-sys-a Ncs 540x-12z16g-sys-d Ncs 540x-16z4g8q2c-a Ncs 540x-16z4g8q2c-d Ncs 540x-acc-sys Ncs 5501 Ncs 5501-se Ncs 5502 Ncs 5502-se Ncs 5508 Ncs 5516 Ncs 560 Ncs 6000 Nexus 1000v Nexus 1000ve Nexus 3016 Nexus 3048 Nexus 3064 Nexus 3064-t Nexus 31108pc-v Nexus 31108tc-v Nexus 31128pq Nexus 3132c-z Nexus 3132q Nexus 3132q-v Nexus 3132q-xl Nexus 3164q Nexus 3172 Nexus 3172pq-xl Nexus 3172tq Nexus 3172tq-32t Nexus 3172tq-xl Nexus 3232c Nexus 3264c-e Nexus 3264q Nexus 3408-s Nexus 34180yc Nexus 3432d-s Nexus 3464c Nexus 3524 Nexus 3524-x Nexus 3524-xl Nexus 3548 Nexus 3548-x Nexus 3548-xl Nexus 36180yc-r Nexus 3636c-r Nexus 5548p Nexus 5548up Nexus 5596t Nexus 5596up Nexus 56128p Nexus 5624q Nexus 5648q Nexus 5672up Nexus 5696q Nexus 7000 Nexus 7700 Nexus 9000v Nexus 92160yc-x Nexus 92300yc Nexus 92304qc Nexus 92348gc-x Nexus 9236c Nexus 9272q Nexus 93108tc-ex Nexus 93108tc-fx Nexus 93120tx Nexus 93128tx Nexus 93180lc-ex Nexus 93180yc-ex Nexus 93180yc-fx Nexus 93216tc-fx2 Nexus 93240yc-fx2 Nexus 9332c Nexus 9332pq Nexus 93360yc-fx2 Nexus 9336c-fx2 Nexus 9336pq Aci Spine Nexus 9348gc-fxp Nexus 9364c Nexus 9372px Nexus 9372px-e Nexus 9372tx Nexus 9372tx-e Nexus 9396px Nexus 9396tx Nexus 9504 Nexus 9508 Nexus 9516 Nx-os Ucs 6248up Ucs 6296up Ucs 6300 Ucs 6324 Ucs 64108 Ucs 6454 Ucs Manager Xrv 9000
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-15T17:42:14.893Z

Reserved: 2019-12-12T00:00:00.000Z

Link: CVE-2020-3120

cve-icon Vulnrichment

Updated: 2024-08-04T07:24:00.647Z

cve-icon NVD

Status : Modified

Published: 2020-02-05T18:15:11.063

Modified: 2024-11-21T05:30:22.057

Link: CVE-2020-3120

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses