Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3120

A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Published

2020-02-05T18:15:11.063

Last Modified

2024-11-21T05:30:22.057

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

6.5

Impact Score

6.9

Weaknesses

Type: Secondary
CWE-190
Type: Primary
CWE-190

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	firepower_extensible_operating_system	≤ 2.3.1.173	Yes
Operating System	cisco	firepower_extensible_operating_system	< 2.6.1.187	Yes
Operating System	cisco	firepower_extensible_operating_system	< 2.7.1.106	Yes
Operating System	cisco	fxos	2.4	Yes
Hardware	cisco	firepower_4110	-	No
Hardware	cisco	firepower_4115	-	No
Hardware	cisco	firepower_4120	-	No
Hardware	cisco	firepower_4125	-	No
Hardware	cisco	firepower_4140	-	No
Hardware	cisco	firepower_4145	-	No
Hardware	cisco	firepower_4150	-	No
Hardware	cisco	firepower_9300	-	No
Operating System	cisco	ios_xr	5.2.5	Yes
Hardware	cisco	ncs_6000	-	No
Operating System	cisco	ios_xr	6.4.2	Yes
Hardware	cisco	asr_9000v	-	No
Hardware	cisco	asr_9001	-	No
Hardware	cisco	asr_9006	-	No
Hardware	cisco	asr_9010	-	No
Hardware	cisco	asr_9901	-	No
Hardware	cisco	asr_9904	-	No
Hardware	cisco	asr_9906	-	No
Hardware	cisco	asr_9910	-	No
Hardware	cisco	asr_9912	-	No
Hardware	cisco	asr_9922	-	No
Hardware	cisco	crs	-	No
Operating System	cisco	ios_xr	6.5.3	Yes
Hardware	cisco	asr_9000v	-	No
Hardware	cisco	asr_9001	-	No
Hardware	cisco	asr_9006	-	No
Hardware	cisco	asr_9010	-	No
Hardware	cisco	asr_9901	-	No
Hardware	cisco	asr_9904	-	No
Hardware	cisco	asr_9906	-	No
Hardware	cisco	asr_9910	-	No
Hardware	cisco	asr_9912	-	No
Hardware	cisco	asr_9922	-	No
Hardware	cisco	ncs_5001	-	No
Hardware	cisco	ncs_5002	-	No
Hardware	cisco	ncs_5011	-	No
Hardware	cisco	ncs_540-12z20g-sys-a	-	No
Hardware	cisco	ncs_540-12z20g-sys-d	-	No
Hardware	cisco	ncs_540-24z8q2c-sys	-	No
Hardware	cisco	ncs_540-28z4c-sys-a	-	No
Hardware	cisco	ncs_540-28z4c-sys-d	-	No
Hardware	cisco	ncs_540-acc-sys	-	No
Hardware	cisco	ncs_540x-12z16g-sys-a	-	No
Hardware	cisco	ncs_540x-12z16g-sys-d	-	No
Hardware	cisco	ncs_540x-16z4g8q2c-a	-	No
Hardware	cisco	ncs_540x-16z4g8q2c-d	-	No
Hardware	cisco	ncs_540x-acc-sys	-	No
Hardware	cisco	ncs_5501	-	No
Hardware	cisco	ncs_5501-se	-	No
Hardware	cisco	ncs_5502	-	No
Hardware	cisco	ncs_5502-se	-	No
Hardware	cisco	ncs_5508	-	No
Hardware	cisco	ncs_5516	-	No
Hardware	cisco	ncs_560	-	No
Hardware	cisco	xrv_9000	-	No
Operating System	cisco	ios_xr	6.6.25	Yes
Hardware	cisco	ncs_560	-	No
Operating System	cisco	ios_xr	7.0.1	Yes
Hardware	cisco	ncs_540l	-	No
Operating System	cisco	nx-os	< 6.2\(29\)	Yes
Operating System	cisco	nx-os	< 8.4\(1a\)	Yes
Hardware	cisco	mds_9132t	-	No
Hardware	cisco	mds_9148s	-	No
Hardware	cisco	mds_9148t	-	No
Hardware	cisco	mds_9216	-	No
Hardware	cisco	mds_9216a	-	No
Hardware	cisco	mds_9216i	-	No
Hardware	cisco	mds_9222i	-	No
Hardware	cisco	mds_9506	-	No
Hardware	cisco	mds_9509	-	No
Hardware	cisco	mds_9513	-	No
Hardware	cisco	mds_9706	-	No
Hardware	cisco	mds_9710	-	No
Hardware	cisco	mds_9718	-	No
Operating System	cisco	nx-os	< 5.2\(1\)sv5\(1.3\)	Yes
Hardware	cisco	nexus_1000ve	-	No
Operating System	cisco	nx-os	≤ 5.2	Yes
Hardware	cisco	nexus_1000v	-	No
Operating System	cisco	nx-os	< 5.2\(1\)sv3\(4.1b\)	Yes
Hardware	cisco	nexus_1000v	-	No
Operating System	cisco	nx-os	< 9.3\(2\)	Yes
Operating System	cisco	nx-os	< 7.0\(3\)i7\(8\)	Yes
Hardware	cisco	nexus_3016	-	No
Hardware	cisco	nexus_3048	-	No
Hardware	cisco	nexus_3064	-	No
Hardware	cisco	nexus_3064-t	-	No
Hardware	cisco	nexus_31108pc-v	-	No
Hardware	cisco	nexus_31108tc-v	-	No
Hardware	cisco	nexus_31128pq	-	No
Hardware	cisco	nexus_3132c-z	-	No
Hardware	cisco	nexus_3132q	-	No
Hardware	cisco	nexus_3132q-v	-	No
Hardware	cisco	nexus_3132q-xl	-	No
Hardware	cisco	nexus_3164q	-	No
Hardware	cisco	nexus_3172	-	No
Hardware	cisco	nexus_3172pq-xl	-	No
Hardware	cisco	nexus_3172tq	-	No
Hardware	cisco	nexus_3172tq-32t	-	No
Hardware	cisco	nexus_3172tq-xl	-	No
Hardware	cisco	nexus_3232c_	-	No
Hardware	cisco	nexus_3264c-e	-	No
Hardware	cisco	nexus_3264q	-	No
Hardware	cisco	nexus_3408-s	-	No
Hardware	cisco	nexus_34180yc	-	No
Hardware	cisco	nexus_3432d-s	-	No
Hardware	cisco	nexus_3464c	-	No
Hardware	cisco	nexus_3524	-	No
Hardware	cisco	nexus_3524-x	-	No
Hardware	cisco	nexus_3524-xl	-	No
Hardware	cisco	nexus_3548	-	No
Hardware	cisco	nexus_3548-x	-	No
Hardware	cisco	nexus_3548-xl	-	No
Hardware	cisco	nexus_36180yc-r	-	No
Hardware	cisco	nexus_3636c-r	-	No
Hardware	cisco	nexus_9000v	-	No
Hardware	cisco	nexus_92160yc-x	-	No
Hardware	cisco	nexus_92300yc	-	No
Hardware	cisco	nexus_92304qc	-	No
Hardware	cisco	nexus_92348gc-x	-	No
Hardware	cisco	nexus_9236c	-	No
Hardware	cisco	nexus_9272q	-	No
Hardware	cisco	nexus_93108tc-ex	-	No
Hardware	cisco	nexus_93108tc-fx	-	No
Hardware	cisco	nexus_93120tx	-	No
Hardware	cisco	nexus_93128tx	-	No
Hardware	cisco	nexus_93180lc-ex	-	No
Hardware	cisco	nexus_93180yc-ex	-	No
Hardware	cisco	nexus_93180yc-fx	-	No
Hardware	cisco	nexus_93216tc-fx2	-	No
Hardware	cisco	nexus_93240yc-fx2	-	No
Hardware	cisco	nexus_9332c	-	No
Hardware	cisco	nexus_9332pq	-	No
Hardware	cisco	nexus_93360yc-fx2	-	No
Hardware	cisco	nexus_9336c-fx2	-	No
Hardware	cisco	nexus_9336pq_aci_spine	-	No
Hardware	cisco	nexus_9348gc-fxp	-	No
Hardware	cisco	nexus_9364c	-	No
Hardware	cisco	nexus_9372px	-	No
Hardware	cisco	nexus_9372px-e	-	No
Hardware	cisco	nexus_9372tx	-	No
Hardware	cisco	nexus_9372tx-e	-	No
Hardware	cisco	nexus_9396px	-	No
Hardware	cisco	nexus_9396tx	-	No
Hardware	cisco	nexus_9504	-	No
Hardware	cisco	nexus_9508	-	No
Hardware	cisco	nexus_9516	-	No
Operating System	cisco	nx-os	< 7.3\(6\)n1\(1\)	Yes
Hardware	cisco	nexus_5548p	-	No
Hardware	cisco	nexus_5548up	-	No
Hardware	cisco	nexus_5596t	-	No
Hardware	cisco	nexus_5596up	-	No
Hardware	cisco	nexus_56128p	-	No
Hardware	cisco	nexus_5624q	-	No
Hardware	cisco	nexus_5648q	-	No
Hardware	cisco	nexus_5672up	-	No
Hardware	cisco	nexus_5696q	-	No
Operating System	cisco	nx-os	< 6.2\(24\)	Yes
Operating System	cisco	nx-os	< 7.3\(5\)d1\(1\)	Yes
Operating System	cisco	nx-os	< 8.2\(5\)	Yes
Operating System	cisco	nx-os	< 8.4\(2\)	Yes
Hardware	cisco	nexus_7000	-	No
Hardware	cisco	nexus_7700	-	No
Operating System	cisco	nx-os	< 13.2\(9b\)	Yes
Operating System	cisco	nx-os	< 14.2\(1j\)	Yes
Hardware	cisco	nexus_9000v	-	No
Hardware	cisco	nexus_92160yc-x	-	No
Hardware	cisco	nexus_92300yc	-	No
Hardware	cisco	nexus_92304qc	-	No
Hardware	cisco	nexus_92348gc-x	-	No
Hardware	cisco	nexus_9236c	-	No
Hardware	cisco	nexus_9272q	-	No
Hardware	cisco	nexus_93108tc-ex	-	No
Hardware	cisco	nexus_93108tc-fx	-	No
Hardware	cisco	nexus_93120tx	-	No
Hardware	cisco	nexus_93128tx	-	No
Hardware	cisco	nexus_93180lc-ex	-	No
Hardware	cisco	nexus_93180yc-ex	-	No
Hardware	cisco	nexus_93180yc-fx	-	No
Hardware	cisco	nexus_93216tc-fx2	-	No
Hardware	cisco	nexus_93240yc-fx2	-	No
Hardware	cisco	nexus_9332c	-	No
Hardware	cisco	nexus_9332pq	-	No
Hardware	cisco	nexus_93360yc-fx2	-	No
Hardware	cisco	nexus_9336c-fx2	-	No
Hardware	cisco	nexus_9336pq_aci_spine	-	No
Hardware	cisco	nexus_9348gc-fxp	-	No
Hardware	cisco	nexus_9364c	-	No
Hardware	cisco	nexus_9372px	-	No
Hardware	cisco	nexus_9372px-e	-	No
Hardware	cisco	nexus_9372tx	-	No
Hardware	cisco	nexus_9372tx-e	-	No
Hardware	cisco	nexus_9396px	-	No
Hardware	cisco	nexus_9396tx	-	No
Hardware	cisco	nexus_9504	-	No
Hardware	cisco	nexus_9508	-	No
Hardware	cisco	nexus_9516	-	No
Application	cisco	ucs_manager	< 3.2\(3m\)	Yes
Application	cisco	ucs_manager	< 4.0\(4g\)	Yes
Hardware	cisco	ucs_6248up	-	No
Hardware	cisco	ucs_6296up	-	No
Hardware	cisco	ucs_6300	-	No
Hardware	cisco	ucs_6324	-	No
Hardware	cisco	ucs_64108	-	No
Hardware	cisco	ucs_6454	-	No

References

http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html Third Party Advisory, VDB Entry ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos Vendor Advisory ([email protected])
http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)