CVE-2020-3119: A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary…

high8.8CVSS 3.1

AVAACLPRNUINSUCHIHAH

A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability exists because the Cisco Discovery Protocol parser does not properly validate input for certain fields in a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. An successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Affected

9 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_unified_computing_system	>= unspecified < 9.3(2)	9.3(2)
cisco	nx-os	< 9.3\(2\)	9.3\(2\)
cisco	nx-os	—	—
cisco	nx-os	>= 14.0 < 14.2\(1j\)	14.2\(1j\)
cisco	nx-os	>= 7.0\(3\)f2 < 9.3\(2\)	9.3\(2\)
cisco	nx-os	>= 7.0\(3\)i < 7.0\(3\)i7\(8\)	7.0\(3\)i7\(8\)
cisco	nx-os	>= 7.1 < 7.3\(6\)n1\(1\)	7.3\(6\)n1\(1\)
cisco	ucs_manager	< 3.2\(3m\)	3.2\(3m\)
cisco	ucs_manager	>= 4.0 < 4.0\(4f\)	4.0\(4f\)