CVE-2023-20200 - Vulnerability Details

A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to the improper handling of specific SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Note: This vulnerability affects all supported SNMP versions. To exploit this vulnerability through SNMPv2c or earlier, an attacker must know the SNMP community string that is configured on an affected device. To exploit this vulnerability through SNMPv3, the attacker must have valid credentials for an SNMP user who is configured on the affected device.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00529.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Unified Computing System (Managed)

affected

Version	Status	Constraints
`3.1(1e)`	affected	—
`3.1(1g)`	affected	—
`3.1(1h)`	affected	—
`3.1(1k)`	affected	—
`3.1(1l)`	affected	—
`3.1(2b)`	affected	—
`3.1(2c)`	affected	—
`3.1(2e)`	affected	—
`3.1(2f)`	affected	—
`3.1(2g)`	affected	—
`3.1(2h)`	affected	—
`3.1(3a)`	affected	—
`3.1(3b)`	affected	—
`3.1(3c)`	affected	—
`3.1(3d)`	affected	—
`3.1(3e)`	affected	—
`3.1(3f)`	affected	—
`3.1(3h)`	affected	—
`3.1(3j)`	affected	—
`3.1(3k)`	affected	—
`3.1(2d)`	affected	—
`3.1(3l)`	affected	—
`3.2(1d)`	affected	—
`3.2(2b)`	affected	—
`3.2(2c)`	affected	—
`3.2(2d)`	affected	—
`3.2(2e)`	affected	—
`3.2(2f)`	affected	—
`3.2(3a)`	affected	—
`3.2(3b)`	affected	—
`3.2(3d)`	affected	—
`3.2(3e)`	affected	—
`3.2(3g)`	affected	—
`3.2(3h)`	affected	—
`3.2(3i)`	affected	—
`3.2(3j)`	affected	—
`3.2(3k)`	affected	—
`3.2(3l)`	affected	—
`3.2(3n)`	affected	—
`3.2(3o)`	affected	—
`3.2(3p)`	affected	—
`4.0(1a)`	affected	—
`4.0(1b)`	affected	—
`4.0(1c)`	affected	—
`4.0(1d)`	affected	—
`4.0(2a)`	affected	—
`4.0(2b)`	affected	—
`4.0(2d)`	affected	—
`4.0(2e)`	affected	—
`4.0(4b)`	affected	—
`4.0(4c)`	affected	—
`4.0(4d)`	affected	—
`4.0(4e)`	affected	—
`4.0(4f)`	affected	—
`4.0(4g)`	affected	—
`4.0(4h)`	affected	—
`4.0(4a)`	affected	—
`4.0(4i)`	affected	—
`4.0(4k)`	affected	—
`4.0(4l)`	affected	—
`4.0(4m)`	affected	—
`4.0(4n)`	affected	—
`4.0(4o)`	affected	—
`4.1(1a)`	affected	—
`4.1(1b)`	affected	—
`4.1(1c)`	affected	—
`4.1(2a)`	affected	—
`4.1(1d)`	affected	—
`4.1(1e)`	affected	—
`4.1(2b)`	affected	—
`4.1(3a)`	affected	—
`4.1(3b)`	affected	—
`4.1(2c)`	affected	—
`4.1(3d)`	affected	—
`4.1(3c)`	affected	—
`4.1(3e)`	affected	—
`4.1(3f)`	affected	—
`4.1(3h)`	affected	—
`4.1(3i)`	affected	—
`4.1(3j)`	affected	—
`4.1(3k)`	affected	—
`4.2(1d)`	affected	—
`4.2(1c)`	affected	—
`4.2(1f)`	affected	—
`4.2(1i)`	affected	—
`4.2(1k)`	affected	—
`4.2(1l)`	affected	—
`4.2(1m)`	affected	—
`4.2(2a)`	affected	—
`4.2(2c)`	affected	—
`4.2(1n)`	affected	—
`4.2(2d)`	affected	—
`4.2(3b)`	affected	—
`4.2(2e)`	affected	—

Cisco

Cisco Firepower Extensible Operating System (FXOS)

affected

Version	Status	Constraints
`2.2.1.63`	affected	—
`2.2.1.66`	affected	—
`2.2.1.70`	affected	—
`2.2.2.17`	affected	—
`2.2.2.19`	affected	—
`2.2.2.24`	affected	—
`2.2.2.26`	affected	—
`2.2.2.28`	affected	—
`2.2.2.54`	affected	—
`2.2.2.60`	affected	—
`2.3.1.93`	affected	—
`2.3.1.91`	affected	—
`2.3.1.88`	affected	—
`2.3.1.75`	affected	—
`2.3.1.73`	affected	—
`2.3.1.66`	affected	—
`2.3.1.58`	affected	—
`2.3.1.56`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:cisco:firepower_9300_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:cisco:firepower_4143_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:cisco:firepower_4112_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

OR	cpe:2.3:o:cisco:ucs_6324_fabric_interconnect_firmware::::::::
	cpe:2.3:o:cisco:ucs_6324_fabric_interconnect_firmware::::::::

cpe:2.3:h:cisco:ucs_6324_fabric_interconnect:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:cisco:firepower_4125_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:cisco:firepower_4115:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

OR	cpe:2.3:o:cisco:ucs_6332_fabric_interconnect_firmware::::::::
	cpe:2.3:o:cisco:ucs_6332_fabric_interconnect_firmware::::::::

cpe:2.3:h:cisco:ucs_6332_fabric_interconnect:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

OR	cpe:2.3:o:cisco:ucs_6332-16up_fabric_interconnect_firmware::::::::
	cpe:2.3:o:cisco:ucs_6332-16up_fabric_interconnect_firmware::::::::

cpe:2.3:h:cisco:ucs_6332-16up_fabric_interconnect:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Cisco Subscribe	Firepower 4112 Subscribe Firepower 4112 Firmware Subscribe Firepower 4115 Subscribe Firepower 4125 Subscribe Firepower 4125 Firmware Subscribe Firepower 4143 Firmware Subscribe Firepower 4145 Subscribe Firepower 9300 Subscribe Firepower 9300 Firmware Subscribe Ucs 6324 Fabric Interconnect Subscribe Ucs 6324 Fabric Interconnect Firmware Subscribe Ucs 6332-16up Fabric Interconnect Subscribe Ucs 6332-16up Fabric Interconnect Firmware Subscribe Ucs 6332 Fabric Interconnect Subscribe Ucs 6332 Fabric Interconnect Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2023-24379	A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the improper handling of specific SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: This vulnerability affects all supported SNMP versions. To exploit this vulnerability through SNMPv2c or earlier, an attacker must know the SNMP community string that is configured on an affected device. To exploit this vulnerability through SNMPv3, the attacker must have valid credentials for an SNMP user who is configured on the affected device.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO

History

Wed, 16 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00405}`	epss `{'score': 0.00416}`

Tue, 01 Jul 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2023-08-23T18:20:09.900Z

Updated: 2025-07-01T13:57:36.701Z

Reserved: 2022-10-27T18:47:50.365Z

Link: CVE-2023-20200

Vulnrichment

Updated: 2024-08-02T09:05:35.047Z

NVD

Status : Modified

Published: 2023-08-23T19:15:08.020

Modified: 2024-11-21T07:40:48.977

Link: CVE-2023-20200

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object