Vulnerability-Lookup

BDU:2020-00890 (CVE-2020-3120)

Vulnerability from fstec – Published: 2020-03-09 – Updated: 2020-03-09 – View on bdu.fstec.ru Yes Fixed

Title

Уязвимость реализации протокола Cisco Discovery операционных систем Cisco NX-OS, Cisco FXOS и Cisco IOS XR, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость реализации протокола Cisco Discovery операционных систем Cisco NX-OS, Cisco FXOS и Cisco IOS XR вызвана целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Severity

6.1 (Medium) CVSS 2.0


                      
                        AV:A/AC:L/Au:N/C:N/I:N/A:C

7.4 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Yes

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2020-3120

References

2 references

URL
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-…
https://nvd.nist.gov/vuln/detail/CVE-2020-3120

Impacted products

4 products from 2 vendors

Vendors

Cisco Systems, Inc.

Products

FX-OS, Cisco IOS XR, NX-OS, Unified Computing System Manager

Versions

до 2.3.1.173 (FX-OS), 2.4 (FX-OS), от 2.6 до 2.6.1.187 (FX-OS), от 2.7 до 2.7.1.106 (FX-OS), 5.2.5 (Cisco IOS XR), 6.4.2 (Cisco IOS XR), 6.5.3 (Cisco IOS XR), 6.6.12 (Cisco IOS XR), 6.6.25 (Cisco IOS XR), 7.0.1 (Cisco IOS XR), от 5.2 до 6.2(29) (NX-OS), от 7.3 до 8.4(1a) (NX-OS), от 5.2 до 5.2(1)SV5(1.3) (NX-OS), 5.2 (NX-OS), от 5.2 до 5.2(1)SV3(4.1b) (NX-OS), до 9.3(2) (NX-OS), до 7.3(6)N1(1) (NX-OS), до 6.2(24) (NX-OS), от 7.2 до 7.3(5)D1(1) (NX-OS), от 8.0 до 8.2(5) (NX-OS), 8.3 (NX-OS), 8.4 (NX-OS), до 3.2(3n) (Unified Computing System Manager), от 4.0 до 4.0(g) (Unified Computing System Manager), до 13.2(9b) (NX-OS), от 14.0 до 14.2(1j) (NX-OS)

Product types

Operating system, Network device, Network software

Platforms

Cisco Systems, Inc. FX-OS до 2.3.1.173 Cisco Firepower 4100 Series, Inc. FX-OS до 2.3.1.173 Cisco Firepower 9300 Security Appliance, Inc. FX-OS 2.4 Cisco Firepower 4100 Series, Inc. FX-OS 2.4 Cisco Firepower 9300 Security Appliance, Inc. FX-OS от 2.6 до 2.6.1.187 Cisco Firepower 4100 Series, Inc. FX-OS от 2.6 до 2.6.1.187 Cisco Firepower 9300 Security Appliance, Inc. FX-OS от 2.7 до 2.7.1.106 Cisco Firepower 4100 Series, Inc. FX-OS от 2.7 до 2.7.1.106 Cisco Firepower 9300 Security Appliance, Inc. Cisco IOS XR 5.2.5 Cisco Network Convergence System 6000 Series, Inc. Cisco IOS XR 6.4.2 ASR 9000 Series Aggregation Services Routers, Inc. Cisco IOS XR 6.4.2 Cisco Carrier Routing System, Inc. Cisco IOS XR 6.5.3 ASR 9000 Series Aggregation Services Routers, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 540 Series Routers, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 5500 Series Routers, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 560 Series Routers, Inc. Cisco IOS XR 6.5.3 IOS XRv 9000 Router, Inc. Cisco IOS XR 6.6.12, Inc. Cisco IOS XR 6.6.25 Network Convergence System (NCS) 560 Series Routers, Inc. Cisco IOS XR 7.0.1 Network Convergence System (NCS) 540 Series Routers, Inc. NX-OS от 5.2 до 6.2(29) Cisco MDS 9000 Series Multilayer Switches, Inc. NX-OS от 7.3 до 8.4(1a) Cisco MDS 9000 Series Multilayer Switches, Inc. NX-OS от 5.2 до 5.2(1)SV5(1.3) Nexus 1000 Virtual Edge for VMware vSphere, Inc. NX-OS 5.2 Cisco Nexus 1000V Switch for Microsoft Hyper-V, Inc. NX-OS от 5.2 до 5.2(1)SV3(4.1b) Cisco Nexus 1000V Switch for VMware vSphere, Inc. NX-OS до 9.3(2) Cisco Nexus 3000 Series Switches, Inc. NX-OS до 9.3(2) Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Inc. NX-OS до 7.3(6)N1(1) Nexus 5500 Series, Inc. NX-OS до 7.3(6)N1(1) Nexus 6000 Series Switches, Inc. NX-OS до 6.2(24) Nexus 7000 Series Switches, Inc. NX-OS от 7.2 до 7.3(5)D1(1) Nexus 7000 Series Switches, Inc. NX-OS от 8.0 до 8.2(5) Nexus 7000 Series Switches, Inc. NX-OS 8.3 Nexus 7000 Series Switches, Inc. NX-OS 8.4 Nexus 7000 Series Switches, Inc. NX-OS до 13.2(9b) Cisco Nexus 9000 Series Fabric Switches in ACI mode, Inc. NX-OS от 14.0 до 14.2(1j) Cisco Nexus 9000 Series Fabric Switches in ACI mode

Mitigations

Использование рекомендаций: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos

JSON

To clipboard

{
  "CVSS 2.0": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2.3.1.173 (FX-OS), 2.4 (FX-OS), \u043e\u0442 2.6 \u0434\u043e 2.6.1.187 (FX-OS), \u043e\u0442 2.7 \u0434\u043e 2.7.1.106 (FX-OS), 5.2.5 (Cisco IOS XR), 6.4.2 (Cisco IOS XR), 6.5.3 (Cisco IOS XR), 6.6.12 (Cisco IOS XR), 6.6.25 (Cisco IOS XR), 7.0.1 (Cisco IOS XR), \u043e\u0442 5.2 \u0434\u043e 6.2(29) (NX-OS), \u043e\u0442 7.3 \u0434\u043e 8.4(1a) (NX-OS), \u043e\u0442 5.2 \u0434\u043e 5.2(1)SV5(1.3) (NX-OS), 5.2 (NX-OS), \u043e\u0442 5.2 \u0434\u043e 5.2(1)SV3(4.1b) (NX-OS), \u0434\u043e 9.3(2) (NX-OS), \u0434\u043e 7.3(6)N1(1) (NX-OS), \u0434\u043e 6.2(24) (NX-OS), \u043e\u0442 7.2 \u0434\u043e 7.3(5)D1(1) (NX-OS), \u043e\u0442 8.0 \u0434\u043e 8.2(5) (NX-OS), 8.3 (NX-OS), 8.4 (NX-OS), \u0434\u043e 3.2(3n) (Unified Computing System Manager), \u043e\u0442 4.0 \u0434\u043e 4.0(g) (Unified Computing System Manager), \u0434\u043e 13.2(9b) (NX-OS), \u043e\u0442 14.0 \u0434\u043e 14.2(1j) (NX-OS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.02.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "09.03.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "09.03.2020",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-00890",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-3120",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "FX-OS, Cisco IOS XR, NX-OS, Unified Computing System Manager",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems, Inc. FX-OS \u0434\u043e 2.3.1.173 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u0434\u043e 2.3.1.173 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS 2.4 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS 2.4 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS \u043e\u0442 2.6 \u0434\u043e 2.6.1.187 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 2.6 \u0434\u043e 2.6.1.187 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS \u043e\u0442 2.7 \u0434\u043e 2.7.1.106 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 2.7 \u0434\u043e 2.7.1.106 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. Cisco IOS XR 5.2.5 Cisco Network Convergence System 6000 Series, Cisco Systems, Inc. Cisco IOS XR 6.4.2 ASR 9000 Series Aggregation Services Routers, Cisco Systems, Inc. Cisco IOS XR 6.4.2 Cisco Carrier Routing System, Cisco Systems, Inc. Cisco IOS XR 6.5.3 ASR 9000 Series Aggregation Services Routers, Cisco Systems, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 540 Series Routers, Cisco Systems, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 5500 Series Routers, Cisco Systems, Inc. Cisco IOS XR 6.5.3 Network Convergence System (NCS) 560 Series Routers, Cisco Systems, Inc. Cisco IOS XR 6.5.3 IOS XRv 9000 Router, Cisco Systems, Inc. Cisco IOS XR 6.6.12 , Cisco Systems, Inc. Cisco IOS XR 6.6.25 Network Convergence System (NCS) 560 Series Routers, Cisco Systems, Inc. Cisco IOS XR 7.0.1 Network Convergence System (NCS) 540 Series Routers, Cisco Systems, Inc. NX-OS \u043e\u0442 5.2 \u0434\u043e 6.2(29) Cisco MDS 9000 Series Multilayer Switches, Cisco Systems, Inc. NX-OS \u043e\u0442 7.3 \u0434\u043e 8.4(1a) Cisco MDS 9000 Series Multilayer Switches, Cisco Systems, Inc. NX-OS \u043e\u0442 5.2 \u0434\u043e 5.2(1)SV5(1.3) Nexus 1000 Virtual Edge for VMware vSphere, Cisco Systems, Inc. NX-OS 5.2 Cisco Nexus 1000V Switch for Microsoft Hyper-V, Cisco Systems, Inc. NX-OS \u043e\u0442 5.2 \u0434\u043e 5.2(1)SV3(4.1b) Cisco Nexus 1000V Switch for VMware vSphere, Cisco Systems, Inc. NX-OS \u0434\u043e 9.3(2) Cisco Nexus 3000 Series Switches, Cisco Systems, Inc. NX-OS \u0434\u043e 9.3(2) Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco Systems, Inc. NX-OS \u0434\u043e 7.3(6)N1(1) Nexus 5500 Series, Cisco Systems, Inc. NX-OS \u0434\u043e 7.3(6)N1(1) Nexus 6000 Series Switches, Cisco Systems, Inc. NX-OS \u0434\u043e 6.2(24) Nexus 7000 Series Switches, Cisco Systems, Inc. NX-OS \u043e\u0442 7.2 \u0434\u043e 7.3(5)D1(1) Nexus 7000 Series Switches, Cisco Systems, Inc. NX-OS \u043e\u0442 8.0 \u0434\u043e 8.2(5) Nexus 7000 Series Switches, Cisco Systems, Inc. NX-OS 8.3 Nexus 7000 Series Switches, Cisco Systems, Inc. NX-OS 8.4 Nexus 7000 Series Switches, Cisco Systems, Inc. NX-OS \u0434\u043e 13.2(9b) Cisco Nexus 9000 Series Fabric Switches in ACI mode, Cisco Systems, Inc. NX-OS \u043e\u0442 14.0 \u0434\u043e 14.2(1j) Cisco Nexus 9000 Series Fabric Switches in ACI mode",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Cisco Discovery \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco NX-OS, Cisco FXOS \u0438 Cisco IOS XR, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Cisco Discovery \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco NX-OS, Cisco FXOS \u0438 Cisco IOS XR \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-3120",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,4)"
}

CVE-2020-3120 (GCVE-0-2020-3120)

Vulnerability from cvelistv5 – Published: 2020-02-05 17:50 – Updated: 2024-11-15 17:42

Title

Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability

Summary

A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Severity

7.4 (High)


                        
                          CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-15 16:29 UTC

CWE

CWE-190

Assigner

cisco mitre root

References

2 references

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
http://packetstormsecurity.com/files/156203/Cisco…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco IOS XR Software	Affected: unspecified , < 2.3.1.173 (custom)

Date Public

2020-02-05 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:24:00.647Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200205 Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-3120",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-15T16:29:31.395421Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-15T17:42:14.893Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XR Software",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "2.3.1.173",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2020-02-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware of public announcements about the vulnerability that is described in this advisory. Cisco PSIRT is not aware of any malicious use of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-05T18:06:04.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20200205 Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20200205-fxnxos-iosxr-cdp-dos",
        "defect": [
          [
            "CSCvr14976",
            "CSCvr15024",
            "CSCvr15072",
            "CSCvr15073",
            "CSCvr15078",
            "CSCvr15079",
            "CSCvr15082",
            "CSCvr15083",
            "CSCvr15111"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2020-02-05T16:00:00-0800",
          "ID": "CVE-2020-3120",
          "STATE": "PUBLIC",
          "TITLE": "Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco IOS XR Software",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "2.3.1.173"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to a missing check when the affected software processes Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to exhaust system memory, causing the device to reload. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware of public announcements about the vulnerability that is described in this advisory. Cisco PSIRT is not aware of any malicious use of this vulnerability."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "7.4",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-190"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200205 Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos"
            },
            {
              "name": "http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20200205-fxnxos-iosxr-cdp-dos",
          "defect": [
            [
              "CSCvr14976",
              "CSCvr15024",
              "CSCvr15072",
              "CSCvr15073",
              "CSCvr15078",
              "CSCvr15079",
              "CSCvr15082",
              "CSCvr15083",
              "CSCvr15111"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2020-3120",
    "datePublished": "2020-02-05T17:50:18.427Z",
    "dateReserved": "2019-12-12T00:00:00.000Z",
    "dateUpdated": "2024-11-15T17:42:14.893Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2020-00890 (CVE-2020-3120)

CVE-2020-3120 (GCVE-0-2020-3120)

Tags

Sightings

Nomenclature

Related by attack behaviour