CVE-2020-3172

🗓️ 26 Feb 2020 16:50:40Reported by ciscoType

A vulnerability in Cisco Discovery Protocol feature of Cisco FXOS and NX-OS Software allows adjacent attacker to execute arbitrary code as root or cause DoS

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Cisco FXOS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco UCS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service (CVE-2020-3172)	25 Jul 202300:00	–	nessus
Cisco	Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability	26 Feb 202016:00	–	cisco
Check Point Advisories	Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)	27 Dec 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-3172 Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability	26 Feb 202016:50	–	cvelist
EUVD	EUVD-2020-24443	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3172	26 Feb 202017:15	–	nvd
OSV	CVE-2020-3172	26 Feb 202017:15	–	osv

NVD

Node

cisco firepower_extensible_operating_systemRange<2.6.1.187

cisco firepower_extensible_operating_systemRange2.7–2.7.1.106

AND

cisco firepower_4110Match-

cisco firepower_4115Match-

cisco firepower_4120Match-

cisco firepower_4125Match-

cisco firepower_4140Match-

cisco firepower_4145Match-

cisco firepower_4150Match-

cisco firepower_9300Match-

Node

cisco ucs_managerRange<3.2(3n)

cisco ucs_managerRange4.0–4.0(4g)

AND

cisco ucs_6248upMatch-

cisco ucs_6296upMatch-

cisco ucs_6324Match-

cisco ucs_6332Match-

cisco ucs_6332-16upMatch-

Node

cisco nx-osMatch-

AND

cisco mds_9132tMatch-

cisco mds_9148sMatch-

cisco mds_9148tMatch-

cisco mds_9216Match-

cisco mds_9216aMatch-

cisco mds_9216iMatch-

cisco mds_9222iMatch-

cisco mds_9506Match-

cisco mds_9509Match-

cisco mds_9513Match-

cisco mds_9706Match-

cisco mds_9710Match-

cisco mds_9718Match-

Node

cisco nx-osMatch5.2(1)sv5(1.2)hyper-v

cisco nx-osMatch5.2(1)sv5(1.2)vsphere

AND

cisco nexus_1000vMatch-

cisco nexus_1000veMatch-

Node

cisco nx-osMatch-

AND

cisco nexus_3016Match-

cisco nexus_3048Match-

cisco nexus_3064Match-

cisco nexus_3064-tMatch-

cisco nexus_31108pc-vMatch-

cisco nexus_31108tc-vMatch-

cisco nexus_31128pqMatch-

cisco nexus_3132c-zMatch-

cisco nexus_3132qMatch-

cisco nexus_3132q-vMatch-

cisco nexus_3132q-xlMatch-

cisco nexus_3164qMatch-

cisco nexus_3172Match-

cisco nexus_3172pq-xlMatch-

cisco nexus_3172tqMatch-

cisco nexus_3172tq-32tMatch-

cisco nexus_3172tq-xlMatch-

cisco nexus_3232c_Match-

cisco nexus_3264c-eMatch-

cisco nexus_3264qMatch-

cisco nexus_3408-sMatch-

cisco nexus_34180ycMatch-

cisco nexus_3432d-sMatch-

cisco nexus_3464cMatch-

cisco nexus_3524Match-

cisco nexus_3524-xMatch-

cisco nexus_3524-xlMatch-

cisco nexus_3548Match-

cisco nexus_3548-xMatch-

cisco nexus_3548-xlMatch-

cisco nexus_36180yc-rMatch-

cisco nexus_3636c-rMatch-

Node

cisco nx-osMatch7.3(5)n1(1)

AND

cisco nexus_5010Match-

cisco nexus_5020Match-

cisco nexus_5548pMatch-

cisco nexus_5548upMatch-

cisco nexus_5596tMatch-

cisco nexus_5596upMatch-

cisco nexus_56128pMatch-

cisco nexus_5624qMatch-

cisco nexus_5648qMatch-

cisco nexus_5672upMatch-

cisco nexus_5696qMatch-

Node

cisco nx-osMatch-

AND

cisco nexus_6001Match-

cisco nexus_6004Match-

Node

cisco nx-osMatch7.3(0)d1(0.140)

cisco nx-osMatch7.3(0)d1(0.146)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osMatch7.0(3)i3(0.191)

cisco nx-osMatch13.2(7.230)

cisco nx-osMatch14.2(1i)

AND

cisco nexus_92304qcMatch-

cisco nexus_92348gc-xMatch-

cisco nexus_9236cMatch-

cisco nexus_9272qMatch-

cisco nexus_93108tc-exMatch-

cisco nexus_93108tc-fxMatch-

cisco nexus_93120txMatch-

cisco nexus_93128txMatch-

cisco nexus_93180lc-exMatch-

cisco nexus_93180yc-exMatch-

cisco nexus_93180yc-fxMatch-

cisco nexus_93216tc-fx2Match-

cisco nexus_93240yc-fx2Match-

cisco nexus_9332cMatch-

cisco nexus_9332pqMatch-

cisco nexus_93360yc-fx2Match-

cisco nexus_9336c-fx2Match-

cisco nexus_9336pq_aci_spineMatch-

cisco nexus_9348gc-fxpMatch-

cisco nexus_9364cMatch-

cisco nexus_9372pxMatch-

cisco nexus_9372px-eMatch-

cisco nexus_9372txMatch-

cisco nexus_9372tx-eMatch-

cisco nexus_9396pxMatch-

cisco nexus_9396txMatch-

cisco nexus_9504Match-

cisco nexus_9508Match-

cisco nexus_9516Match-

[
  {
    "product": "Cisco Unified Computing System (Managed)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-fxos-nxos-cdp

21 Nov 2024 05:30Current

9.4High risk

Vulners AI Score9.4

CVSS 28.3

CVSS 3.18.8

CVSS 38.8

EPSS0.00706

SSVC

CWE-20