CVE-2020-3172 Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

🗓️ 26 Feb 2020 16:50:40Reported by ciscoType

Cisco FXOS/NX-OS Discovery Protocol Code Execution and DoS Vulnerabilit

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Cisco Discovery protocol allows attackers to trigger a maintenance failure in operating systems such as Cisco NX-OS and Cisco FXOS.	6 Apr 202000:00	–	bdu_fstec
Tenable Nessus	Cisco FXOS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco UCS Software Cisco Discovery Protocol Arbitrary Code Execution and DoS (cisco-sa-20200226-fxos-nxos-cdp)	6 Mar 202000:00	–	nessus
Tenable Nessus	Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service (CVE-2020-3172)	25 Jul 202300:00	–	nessus
Cisco	Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability	26 Feb 202016:00	–	cisco
Check Point Advisories	Web Servers Buffer Overflow Attempt (CVE-2020-3119; CVE-2020-3120; CVE-2020-3172; CVE-2020-8450)	27 Dec 202000:00	–	checkpoint_advisories
CVE	CVE-2020-3172	26 Feb 202016:50	–	cve
EUVD	EUVD-2020-24443	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3172	26 Feb 202017:15	–	nvd

[
  {
    "product": "Cisco Unified Computing System (Managed)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-fxos-nxos-cdp

26 Feb 2020 16:50Current

9.4High risk

Vulners AI Score9.4

CVSS 38.8

EPSS0.00706

CWE-20