What is CVE-2020-3397?

CVE-2020-3397 is a vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Which devices are affected by CVE-2020-3397?

Cisco Nexus devices running Cisco NX-OS Software are affected by CVE-2020-3397.

How severe is CVE-2020-3397?

CVE-2020-3397 has a severity rating of 8.6 (high).

How can I fix CVE-2020-3397?

To fix CVE-2020-3397, Cisco recommends upgrading to a fixed software release.

Where can I find more information about CVE-2020-3397?

More information about CVE-2020-3397 can be found on the Cisco Security Advisory page.

Vulnerability/
CVE-2020-3397

high

8.6

CWE

27/8/2020

13/11/2024

CVE-2020-3397: Cisco NX-OS Software Border Gateway Protocol Multicast VPN Denial of Service Vulnerability

First published: Thu Aug 27 2020(Updated: )

A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of a specific type of BGP MVPN update message. An attacker could exploit this vulnerability by sending this specific, valid BGP MVPN update message to a targeted device. A successful exploit could allow the attacker to cause one of the BGP-related routing applications to restart multiple times, leading to a system-level restart. Note: The Cisco implementation of BGP accepts incoming BGP traffic from only explicitly configured peers. To exploit this vulnerability, an attacker must send a specific BGP MVPN update message over an established TCP connection that appears to come from a trusted BGP peer. To do so, the attacker must obtain information about the BGP peers in the trusted network of the affected system.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Nx-os
Cisco Nexus 3016
Cisco Nexus 3048
Cisco Nexus 3064
Cisco Nexus 3064-t
Cisco Nexus 31108pc-v
Cisco Nexus 31108tc-v
Cisco Nexus 31128pq
Cisco Nexus 3132c-z
Cisco Nexus 3132q
Cisco Nexus 3132q-v
Cisco Nexus 3132q-xl
Cisco Nexus 3164q
Cisco Nexus 3172
Cisco Nexus 3172pq-xl
Cisco Nexus 3172tq
Cisco Nexus 3172tq-32t
Cisco Nexus 3172tq-xl
Cisco Nexus 3232c
Cisco Nexus 3264c-e
Cisco Nexus 3264q
Cisco Nexus 3408-s
Cisco Nexus 34180yc
Cisco Nexus 3432d-s
Cisco Nexus 3464c
Cisco Nexus 3524
Cisco Nexus 3524-x
Cisco Nexus 3524-xl
Cisco Nexus 3548
Cisco Nexus 3548-x
Cisco Nexus 3548-xl
Cisco Nexus 36180yc-r
Cisco Nexus 3636c-r
Cisco Nexus 92160yc-x
Cisco Nexus 92300yc
Cisco Nexus 92304qc
Cisco Nexus 92348gc-x
Cisco Nexus 9236c
Cisco Nexus 9272q
Cisco Nexus 93108tc-ex
Cisco Nexus 93108tc-fx
Cisco Nexus 93120tx
Cisco Nexus 93128tx
Cisco Nexus 93180lc-ex
Cisco Nexus 93180yc-ex
Cisco Nexus 93180yc-fx
Cisco Nexus 93216tc-fx2
Cisco Nexus 93240yc-fx2
Cisco Nexus 9332c
Cisco Nexus 9332pq
Cisco Nexus 93360yc-fx2
Cisco Nexus 9336c-fx2
Cisco Nexus 9336pq Aci Spine
Cisco Nexus 9348gc-fxp
Cisco Nexus 9364c
Cisco Nexus 9372px
Cisco Nexus 9372px-e
Cisco Nexus 9372tx
Cisco Nexus 9372tx-e
Cisco Nexus 9396px
Cisco Nexus 9396tx
Cisco Nexus 9504
Cisco Nexus 9508
Cisco Nexus 9516

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-nlri-dos-458rG2OQ

Frequently Asked Questions

What is CVE-2020-3397?
CVE-2020-3397 is a vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
Which devices are affected by CVE-2020-3397?
Cisco Nexus devices running Cisco NX-OS Software are affected by CVE-2020-3397.
How severe is CVE-2020-3397?
CVE-2020-3397 has a severity rating of 8.6 (high).
How can I fix CVE-2020-3397?
To fix CVE-2020-3397, Cisco recommends upgrading to a fixed software release.
Where can I find more information about CVE-2020-3397?
More information about CVE-2020-3397 can be found on the Cisco Security Advisory page.