HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2020-3118

CVSS 8.8v3.1pub. 2020-02-05upd. 2025-10-28

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Asr 9000

    HW
    Cisco
    all versions

  • Cisco Asr 9000v

    HW
    Cisco
    all versions

  • Cisco Asr 9001

    HW
    Cisco
    all versions

  • Cisco Asr 9006

    HW
    Cisco
    all versions

  • Cisco Asr 9010

    HW
    Cisco
    all versions

  • Cisco Asr 9901

    HW
    Cisco
    all versions

  • Cisco Asr 9903

    HW
    Cisco
    all versions

  • Cisco Asr 9904

    HW
    Cisco
    all versions

  • Cisco Asr 9906

    HW
    Cisco
    all versions

  • Cisco Asr 9910

    HW
    Cisco
    all versions

  • Cisco Asr 9912

    HW
    Cisco
    all versions

  • Cisco Asr 9920

    HW
    Cisco
    all versions

  • Cisco Asr 9922

    HW
    Cisco
    all versions

  • Cisco Crs X

    HW
    Cisco
    all versions

  • Cisco IOS XR

    OS
    Cisco
    5.2.56.4.26.5.36.6.257.0.17.0.0 – 7.0.2 (excl.)6.6.0 – 6.6.12 (excl.)

  • Cisco Ncs 540 12z20g Sys A

    HW
    Cisco
    all versions

  • Cisco Ncs 540 12z20g Sys D

    HW
    Cisco
    all versions

  • Cisco Ncs 540 24z8q2c Sys

    HW
    Cisco
    all versions

  • Cisco Ncs 540 28z4c Sys A

    HW
    Cisco
    all versions

  • Cisco Ncs 540 28z4c Sys D

    HW
    Cisco
    all versions

  • Cisco Ncs 540 Acc Sys

    HW
    Cisco
    all versions

  • Cisco Ncs 540l

    HW
    Cisco
    all versions

  • Cisco Ncs 540x 12z16g Sys A

    HW
    Cisco
    all versions

  • Cisco Ncs 540x 12z16g Sys D

    HW
    Cisco
    all versions

  • Cisco Ncs 540x 16z4g8q2c A

    HW
    Cisco
    all versions

  • Cisco Ncs 540x 16z4g8q2c D

    HW
    Cisco
    all versions

  • Cisco Ncs 540x Acc Sys

    HW
    Cisco
    all versions

  • Cisco Ncs 5501

    HW
    Cisco
    all versions

  • Cisco Ncs 5501 Se

    HW
    Cisco
    all versions

  • Cisco Ncs 5502

    HW
    Cisco
    all versions

CISA KEV — detailsi

Vendori
Cisco ↗
Producti
IOS XR
Added to KEVi
November 3, 2021
Remediation deadline (US Federal)i
May 3, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 3 maja 2022
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2017-12240CRITICAL9.8⚠ KEVPL ✓same product

Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia

CVE-2025-20363CRITICAL9.0PL ✓same product

RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP

CVE-2020-3284CRITICAL9.8PL ✓same product

Cisco IOS XR: wykonanie niepodpisanego kodu podczas bootowania PXE

CVE-2019-1710CRITICAL9.8PL ✓same product

Nieautoryzowany dostęp do sysadmin VM na Cisco ASR 9000 z IOS XR 64-bit

CVE-2020-3569HIGH8.6⚠ KEVsame product

Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Sof...