CVE-2020-3415

🗓️ 27 Aug 2020 16:15:12Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

A vulnerability in Cisco NX-OS Software allows adjacent attacker to execute arbitrary code with admin privileges or cause DoS by sending crafted Cisco Discovery Protocol packet. Requires broadcast domain access and jumbo frames enabled

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Data Management Module (DME) of the Cisco NX-OS network operating system, which allows a hacker to execute arbitrary code or cause a service failure.	3 Sep 202000:00	–	bdu_fstec
Cisco	Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability	26 Aug 202016:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Data Management Engine Remote Code Execution (cisco-sa-nxos-dme-rce-cbE3nhZS)	2 Sep 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software (UCS) Data Management Engine Remote Code Execution (cisco-sa-nxos-dme-rce-cbE3nhZS)	2 Sep 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Data Management Engine Remote Code Execution (CVE-2020-3415)	25 Jul 202300:00	–	nessus
CNVD	Cisco NX-OS Remote Code Execution Vulnerability	27 Aug 202000:00	–	cnvd
CVE	CVE-2020-3415	27 Aug 202015:40	–	cve
Cvelist	CVE-2020-3415 Cisco NX-OS Software Data Management Engine Remote Code Execution Vulnerability	27 Aug 202015:40	–	cvelist
EUVD	EUVD-2020-24686	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	27 Aug 202000:00	–	ncsc

NVD

Node

cisco nx-osMatch-

AND

cisco nexus_3016Match-

OR

cisco nexus_3048Match-

OR

cisco nexus_3064Match-

OR

cisco nexus_3064-tMatch-

OR

cisco nexus_31108pc-vMatch-

OR

cisco nexus_31108tc-vMatch-

OR

cisco nexus_31128pqMatch-

OR

cisco nexus_3132c-zMatch-

OR

cisco nexus_3132qMatch-

OR

cisco nexus_3132q-vMatch-

OR

cisco nexus_3132q-xlMatch-

OR

cisco nexus_3164qMatch-

OR

cisco nexus_3172Match-

OR

cisco nexus_3172pq-xlMatch-

OR

cisco nexus_3172tqMatch-

OR

cisco nexus_3172tq-32tMatch-

OR

cisco nexus_3172tq-xlMatch-

OR

cisco nexus_3232cMatch-

OR

cisco nexus_3264c-eMatch-

OR

cisco nexus_3264qMatch-

OR

cisco nexus_3408-sMatch-

OR

cisco nexus_34180ycMatch-

OR

cisco nexus_3432d-sMatch-

OR

cisco nexus_3464cMatch-

OR

cisco nexus_3524Match-

OR

cisco nexus_3524-xMatch-

OR

cisco nexus_3524-xlMatch-

OR

cisco nexus_3548Match-

OR

cisco nexus_3548-xMatch-

OR

cisco nexus_3548-xlMatch-

OR

cisco nexus_36180yc-rMatch-

OR

cisco nexus_3636c-rMatch-

OR

cisco nexus_92160yc-xMatch-

OR

cisco nexus_92300ycMatch-

OR

cisco nexus_92304qcMatch-

OR

cisco nexus_92348gc-xMatch-

OR

cisco nexus_9236cMatch-

OR

cisco nexus_9272qMatch-

OR

cisco nexus_93108tc-exMatch-

OR

cisco nexus_93108tc-fxMatch-

OR

cisco nexus_93120txMatch-

OR

cisco nexus_93128txMatch-

OR

cisco nexus_93180lc-exMatch-

OR

cisco nexus_93180yc-exMatch-

OR

cisco nexus_93180yc-fxMatch-

OR

cisco nexus_93216tc-fx2Match-

OR

cisco nexus_93240yc-fx2Match-

OR

cisco nexus_9332cMatch-

OR

cisco nexus_9332pqMatch-

OR

cisco nexus_93360yc-fx2Match-

OR

cisco nexus_9336c-fx2Match-

OR

cisco nexus_9336pq_aci_spineMatch-

OR

cisco nexus_9348gc-fxpMatch-

OR

cisco nexus_9364cMatch-

OR

cisco nexus_9372pxMatch-

OR

cisco nexus_9372px-eMatch-

OR

cisco nexus_9372txMatch-

OR

cisco nexus_9372tx-eMatch-

OR

cisco nexus_9396pxMatch-

OR

cisco nexus_9396txMatch-

OR

cisco nexus_9504Match-

OR

cisco nexus_9508Match-

OR

cisco nexus_9516Match-

Node

cisco nx-osRange4.0–4.0(4h)

AND

cisco ucs_64108Match-

OR

cisco ucs_6454Match-

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-dme-rce-cbE3nhZS

21 Nov 2024 05:30Current

9High risk

Vulners AI Score9

CVSS 27.9

CVSS 3.18.8

CVSS 38.8

EPSS0.00214

vulnerability cisco nx-os arbitrary code admin privileges dos cisco discovery protocol crafted packet broadcast domain jumbo frames