CVE-2020-3168 — Uncontrolled Resource Consumption in Cisco Nx-os Software

CWE-399CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
7.5HIGHNVD
EPSS
2.4%
top 14.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Nx-os SoftwareCisco Nx-os
Timeline
PublishedFeb 26
Latest updateMay 24

Description

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module (VSM) to become inaccessible to users through the CLI. The vulnerability is due to improper resource allocation during failed CLI login attempts when login parameters that are part of the Secure Login Enhancements capability are configured on an affected device. An attacker could explo…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_nx-os_softwareunspecified — n/a
▶NVDcisco/nx-os5.2\(1\)sv3\(4.1a\)

🔴Vulnerability Details

2
GHSA
GHSA-qqf9-xgg2-qrxx: A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote atta↗2022-05-24
▶
CVEList
Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability↗2020-02-26
▶

📋Vendor Advisories

1
Cisco
Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability↗2020-02-26
▶
CVE-2020-3168 — Uncontrolled Resource Consumption | cvebase