CVE-2020-3174: Cisco NX-OS Software Anycast Gateway Invalid ARP Vulnerability

First published: Wed Feb 26 2020(Updated: )

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper validation of a received gratuitous ARP (GARP) request. An attacker could exploit this vulnerability by sending a malicious GARP packet on the local subnet to cause the ARP table on the device to become corrupted. A successful exploit could allow the attacker to populate the ARP table with incorrect entries, which could lead to traffic disruptions.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/references
• agent/severity
• agent/weakness
• agent/title
• agent/author
• agent/tags
• agent/description
• agent/first-publish-date
• agent/event
• vendor/cisco
• canonical/cisco nx-os
• version/cisco nx-os/8.1\(1\)
• version/cisco nx-os/8.4\(1\)
• version/cisco nx-os/9.3\(1\)
• canonical/cisco mds 9132t
• canonical/cisco mds 9148s
• canonical/cisco mds 9148t
• canonical/cisco mds 9216
• canonical/cisco mds 9216a
• canonical/cisco mds 9216i
• canonical/cisco mds 9222i
• canonical/cisco mds 9506
• canonical/cisco mds 9509
• canonical/cisco mds 9513
• canonical/cisco mds 9706
• canonical/cisco mds 9710
• canonical/cisco mds 9718
• canonical/cisco nexus 3016
• canonical/cisco nexus 3048
• canonical/cisco nexus 3064
• canonical/cisco nexus 3064-t
• canonical/cisco nexus 31108pc-v
• canonical/cisco nexus 31108tc-v
• canonical/cisco nexus 31128pq
• canonical/cisco nexus 3132c-z
• canonical/cisco nexus 3132q
• canonical/cisco nexus 3132q-v
• canonical/cisco nexus 3132q-xl
• canonical/cisco nexus 3164q
• canonical/cisco nexus 3172
• canonical/cisco nexus 3172pq-xl
• canonical/cisco nexus 3172tq
• canonical/cisco nexus 3172tq-32t
• canonical/cisco nexus 3172tq-xl
• canonical/cisco nexus 3232c
• canonical/cisco nexus 3264c-e
• canonical/cisco nexus 3264q
• canonical/cisco nexus 3408-s
• canonical/cisco nexus 34180yc
• canonical/cisco nexus 3432d-s
• canonical/cisco nexus 3464c
• canonical/cisco nexus 3524
• canonical/cisco nexus 3524-x
• canonical/cisco nexus 3524-xl
• canonical/cisco nexus 3548
• canonical/cisco nexus 3548-x
• canonical/cisco nexus 3548-xl
• canonical/cisco nexus 36180yc-r
• canonical/cisco nexus 3636c-r
• canonical/cisco nexus 7000
• canonical/cisco nexus 7700
• canonical/cisco nexus 9000v
• canonical/cisco nexus 92160yc-x
• canonical/cisco nexus 92300yc
• canonical/cisco nexus 92304qc
• canonical/cisco nexus 92348gc-x
• canonical/cisco nexus 9236c
• canonical/cisco nexus 9272q
• canonical/cisco nexus 93108tc-ex
• canonical/cisco nexus 93108tc-fx
• canonical/cisco nexus 93120tx
• canonical/cisco nexus 93128tx
• canonical/cisco nexus 93180lc-ex
• canonical/cisco nexus 93180yc-ex
• canonical/cisco nexus 93180yc-fx
• canonical/cisco nexus 93216tc-fx2
• canonical/cisco nexus 93240yc-fx2
• canonical/cisco nexus 9332c
• canonical/cisco nexus 9332pq
• canonical/cisco nexus 93360yc-fx2
• canonical/cisco nexus 9336c-fx2
• canonical/cisco nexus 9336pq aci spine
• canonical/cisco nexus 9348gc-fxp
• canonical/cisco nexus 9364c
• canonical/cisco nexus 9372px
• canonical/cisco nexus 9372px-e
• canonical/cisco nexus 9372tx
• canonical/cisco nexus 9372tx-e
• canonical/cisco nexus 9396px
• canonical/cisco nexus 9396tx
• canonical/cisco nexus 9504
• canonical/cisco nexus 9508
• canonical/cisco nexus 9516