The vulnerability in the implementation of the Cisco Discovery protocol of the IP camera software from Cisco Video Surveillance series 8000 allows a intruder to execute arbitrary code or trigger a reboot of the vulnerable IP camera.

🗓️ 04 Mar 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Cisco Discovery Protocol flaw in Surveillance 8000 enables code execution or reboot due to input validation.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2020-3110 (AKA: CDPwn)	5 Feb 202000:00	–	attackerkb
Circl	CVE-2020-3110	7 Feb 202011:05	–	circl
Cisco	Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability	5 Feb 202016:00	–	cisco
CNVD	Cisco Discovery Protocol Authentication Vulnerability in Cisco Video Surveillance 8000 Series IP Cameras	6 Feb 202000:00	–	cnvd
CVE	CVE-2020-3110	5 Feb 202017:35	–	cve
Cvelist	CVE-2020-3110 Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability	5 Feb 202017:35	–	cvelist
EUVD	EUVD-2020-24381	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	6 Feb 202000:00	–	ncsc
NVD	CVE-2020-3110	5 Feb 202018:15	–	nvd
Prion	Design/Logic Flaw	5 Feb 202018:15	–	prion

Vulners

Node

cisco_systems video_surveillance_8000_series_ip_cameraRange<1.0.7

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-ipcameras-rce-dos
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3110
web	www.web.nvd.nist.gov/view/vuln/detail

04 Mar 2020 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 28.3

CVSS 38.8

EPSS0.05728

Cisco Discovery Protocol Surveillance 8000 Remote code execution Reboot threat Input validation