CVE-2020-3119 Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability

🗓️ 05 Feb 2020 17:45:15Reported by ciscoType

Cisco NX-OS Software Discovery Protocol Code Execution Vulnerabilit

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2020-3119 (AKA: CDPwn)	5 Feb 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the Cisco Discovery protocol in the Cisco NX-OSS routing devices allows a attacker to execute arbitrary code or trigger a reboot of the vulnerable device.	4 Mar 202000:00	–	bdu_fstec
Circl	CVE-2020-3119	7 Feb 202011:05	–	circl
Cisco	Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability	5 Feb 202016:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability (cisco-sa-20200205-nxos-cdp-rce)	10 Feb 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution (CVE-2020-3119)	25 Jul 202300:00	–	nessus
CNVD	Cisco Discovery Protocol Remote Code Execution Vulnerability in Cisco NX-OS Software	6 Feb 202000:00	–	cnvd
Check Point Advisories	Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)	27 Dec 202000:00	–	checkpoint_advisories
CVE	CVE-2020-3119	5 Feb 202017:45	–	cve
EUVD	EUVD-2020-24390	7 Oct 202500:30	–	euvd

[
  {
    "product": "Cisco Unified Computing System (Managed)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "9.3(2)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-nxos-cdp-rce
packetstormsecurity	www.packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html

05 Feb 2020 18:06Current

8.9High risk

Vulners AI Score8.9

CVSS 38.8

EPSS0.05098

CWE-787