CVE-2020-3172 Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

CVE-2020-3172

CVE-2020-3172 affects Cisco FXOS Software and Cisco NX-OS Software via the Cisco Discovery Protocol. Insufficient validation of CDP packet headers allows an unauthenticated, Layer-2 adjacent attacker to send a crafted CDP packet, causing a buffer overflow that could let the attacker execute arbit...

Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service DoS condition on an affected device. The vulnerability exists because of...

PT-2020-1987 · Cisco · Cisco Fxos +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software and Cisco NX-OS Software affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol feature could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a...

CVE-2015-2923

The Neighbor Discovery ND protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

CVE-2015-2923

Removed by vendor...

Cisco IOS XR Software Cisco Discovery Protocol RCE (cisco-sa-20200205-iosxr-cdp-rce)

Binary data 701265.prm...

Cisco IOS XR Software Cisco Discovery Protocol DoS (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

Binary data 701266.prm...

Cisco IOS XR Software Cisco Discovery Protocol Denial of Service Vulnerability (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

According to its self-reported version, the Cisco IOS XR Software is affected by a denial of service vulnerability within the Cisco Discovery Protocol due to missing a check when processing protocol messages. An unauthenticated, adjacent attacker can exploit this to cause the device to reboot...

Cisco NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

According to its self-reported version, the Cisco NX-OS Software is affected by a denial of service vulnerability within the Cisco Discovery Protocol due to missing a check when processing protocol messages. An unauthenticated, adjacent attacker can exploit this to cause the device to reboot...

Cisco FXOS Software Cisco Discovery Protocol Denial of Service Vulnerability (cisco-sa-20200205-fxnxos-iosxr-cdp-dos)

According to its self-reported version, Cisco FXOS Software is affected by a denial of service vulnerability within the Cisco Discovery Protocol due to missing a check when processing protocol messages. An unauthenticated, adjacent attacker can exploit this to cause the device to reboot. Please s...

Cisco IOS XR Software Cisco Discovery Protocol Remote Code Execution Vulnerability (cisco-sa-20200205-iosxr-cdp-rce)

According to its self-reported version, the Cisco IOS XR Software is affected by a remote code execution vulnerability within the Cisco Discovery Protocol due to improper validation of string input. An unauthenticated, adjacent attacker can exploit this to bypass authentication and execute...

Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability (cisco-sa-20200205-nxos-cdp-rce)

According to its self-reported version, the Cisco NX-OS System Software is affected by a remote code execution vulnerability within the Cisco Discovery Protocol due to improper validation of input. An unauthenticated, adjacent attacker can exploit this to bypass authentication and execute arbitra...

CVE-2020-3111

creationtimestamp| type| source ---|---|--- 2020-02-07 11:05:23+00:00| seen| https://t.me/icscert/234 2020-02-07 11:05:26+00:00| seen| https://t.me/icscert/232 2020-02-07 15:05:07+00:00| seen|...

CVE-2020-3119

creationtimestamp| type| source ---|---|--- 2020-02-07 11:05:23+00:00| seen| https://t.me/icscert/234 2020-02-07 11:05:26+00:00| seen| https://t.me/icscert/232 2020-02-07 15:05:07+00:00| seen|...

CVE-2020-3120

creationtimestamp| type| source ---|---|--- 2020-02-07 11:05:23+00:00| seen| https://t.me/icscert/234 2020-02-07 11:05:26+00:00| seen| https://t.me/icscert/232 2020-02-07 15:05:07+00:00| seen|...

CVE-2020-3110

creationtimestamp| type| source ---|---|--- 2020-02-07 11:05:23+00:00| seen| https://t.me/icscert/234 2020-02-07 11:05:26+00:00| seen| https://t.me/icscert/232 2020-02-07 15:05:07+00:00| seen|...

Cisco Discovery Protocol Authentication Vulnerability in Cisco Video Surveillance 8000 Series IP Cameras

Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol is a high-definition IP camera product from Cisco USA. An authentication vulnerability exists in Cisco Discovery Protocol in Cisco Video Surveillance 8000 Series IP Cameras. The vulnerability is due to a lack of checks when...

Cisco Discovery Protocol Format String Vulnerability in Cisco IOS XR Software

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A format string vulnerability exists in the Cisco Discovery protocol in Cisco IOS XR Software. The vulnerability stems...

Vulnerabilities fixed in Cisco products

Vulnerabilities have been fixed in Cisco products. The vulnerabilities are all in the Cisco Discovery Protocol CDP. The vulnerabilities allow an unauthenticated malicious person using a rogue CDP packet to establish a Denial-of-Service and potentially execute arbitrary code execution. Because CDP...