CVE-2020-3172: Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability

First published: Wed Feb 26 2020(Updated: )

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability exists because of insufficiently validated Cisco Discovery Protocol packet headers. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to a Layer 2-adjacent affected device. A successful exploit could allow the attacker to cause a buffer overflow that could allow the attacker to execute arbitrary code as root or cause a DoS condition on the affected device. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Note: This vulnerability is different from the following Cisco FXOS and NX-OS Software Cisco Discovery Protocol vulnerabilities that Cisco announced on Feb. 5, 2020: Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability and Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/type
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/author
• agent/softwarecombine
• agent/description
• agent/references
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/severity
• agent/title
• agent/tags
• agent/first-publish-date
• agent/event
• vendor/cisco
• canonical/cisco firepower extensible operating system
• version/cisco firepower extensible operating system/2.7
• canonical/cisco firepower 4110
• canonical/cisco firepower 4115
• canonical/cisco firepower 4120
• canonical/cisco firepower 4125
• canonical/cisco firepower 4140
• canonical/cisco firepower 4145
• canonical/cisco firepower 4150
• canonical/cisco firepower 9300
• canonical/cisco ucs manager
• version/cisco ucs manager/4.0
• canonical/cisco ucs 6248up
• canonical/cisco ucs 6296up
• canonical/cisco ucs 6324
• canonical/cisco ucs 6332
• canonical/cisco ucs 6332-16up
• canonical/cisco nx-os
• canonical/cisco mds 9132t
• canonical/cisco mds 9148s
• canonical/cisco mds 9148t
• canonical/cisco mds 9216
• canonical/cisco mds 9216a
• canonical/cisco mds 9216i
• canonical/cisco mds 9222i
• canonical/cisco mds 9506
• canonical/cisco mds 9509
• canonical/cisco mds 9513
• canonical/cisco mds 9706
• canonical/cisco mds 9710
• canonical/cisco mds 9718
• canonical/cisco nx-os hyper-v
• version/cisco nx-os hyper-v/5.2\(1\)sv5\(1.2\)
• canonical/cisco nx-os vsphere
• version/cisco nx-os vsphere/5.2\(1\)sv5\(1.2\)
• canonical/cisco nexus 1000v
• canonical/cisco nexus 1000ve
• canonical/cisco nexus 3016
• canonical/cisco nexus 3048
• canonical/cisco nexus 3064
• canonical/cisco nexus 3064-t
• canonical/cisco nexus 31108pc-v
• canonical/cisco nexus 31108tc-v
• canonical/cisco nexus 31128pq
• canonical/cisco nexus 3132c-z
• canonical/cisco nexus 3132q
• canonical/cisco nexus 3132q-v
• canonical/cisco nexus 3132q-xl
• canonical/cisco nexus 3164q
• canonical/cisco nexus 3172
• canonical/cisco nexus 3172pq-xl
• canonical/cisco nexus 3172tq
• canonical/cisco nexus 3172tq-32t
• canonical/cisco nexus 3172tq-xl
• canonical/cisco nexus 3232c
• canonical/cisco nexus 3264c-e
• canonical/cisco nexus 3264q
• canonical/cisco nexus 3408-s
• canonical/cisco nexus 34180yc
• canonical/cisco nexus 3432d-s
• canonical/cisco nexus 3464c
• canonical/cisco nexus 3524
• canonical/cisco nexus 3524-x
• canonical/cisco nexus 3524-xl
• canonical/cisco nexus 3548
• canonical/cisco nexus 3548-x
• canonical/cisco nexus 3548-xl
• canonical/cisco nexus 36180yc-r
• canonical/cisco nexus 3636c-r
• version/cisco nx-os/7.3\(5\)n1\(1\)
• canonical/cisco nexus 5010
• canonical/cisco nexus 5020
• canonical/cisco nexus 5548p
• canonical/cisco nexus 5548up
• canonical/cisco nexus 5596t
• canonical/cisco nexus 5596up
• canonical/cisco nexus 56128p
• canonical/cisco nexus 5624q
• canonical/cisco nexus 5648q
• canonical/cisco nexus 5672up
• canonical/cisco nexus 5696q
• canonical/cisco nexus 6001
• canonical/cisco nexus 6004
• version/cisco nx-os/7.3\(0\)d1\(0.140\)
• version/cisco nx-os/7.3\(0\)d1\(0.146\)
• canonical/cisco nexus 7000
• canonical/cisco nexus 7700
• version/cisco nx-os/7.0\(3\)i3\(0.191\)
• version/cisco nx-os/13.2\(7.230\)
• version/cisco nx-os/14.2\(1i\)
• canonical/cisco nexus 92304qc
• canonical/cisco nexus 92348gc-x
• canonical/cisco nexus 9236c
• canonical/cisco nexus 9272q
• canonical/cisco nexus 93108tc-ex
• canonical/cisco nexus 93108tc-fx
• canonical/cisco nexus 93120tx
• canonical/cisco nexus 93128tx
• canonical/cisco nexus 93180lc-ex
• canonical/cisco nexus 93180yc-ex
• canonical/cisco nexus 93180yc-fx
• canonical/cisco nexus 93216tc-fx2
• canonical/cisco nexus 93240yc-fx2
• canonical/cisco nexus 9332c
• canonical/cisco nexus 9332pq
• canonical/cisco nexus 93360yc-fx2
• canonical/cisco nexus 9336c-fx2
• canonical/cisco nexus 9336pq aci spine
• canonical/cisco nexus 9348gc-fxp
• canonical/cisco nexus 9364c
• canonical/cisco nexus 9372px
• canonical/cisco nexus 9372px-e
• canonical/cisco nexus 9372tx
• canonical/cisco nexus 9372tx-e
• canonical/cisco nexus 9396px
• canonical/cisco nexus 9396tx
• canonical/cisco nexus 9504
• canonical/cisco nexus 9508
• canonical/cisco nexus 9516