Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000.

Published

2020-09-23T13:15:16.093

Last Modified

2024-11-21T05:36:40.077

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System arubanetworks cx_6200f_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_6200f - No
Operating System arubanetworks cx_6300_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_6300 - No
Operating System arubanetworks cx_6400_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_6400 - No
Operating System arubanetworks cx_8320_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_8320 - No
Operating System arubanetworks cx_8325_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_8325 - No
Operating System arubanetworks cx_8400_firmware ≤ 10.04.1000 Yes
Hardware arubanetworks cx_8400 - No
References