HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-3175

CVSS 8.6v3.1pub. 2020-02-26upd. 2024-11-21

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Mds 9132t

    HW
    Cisco
    all versions

  • Cisco Mds 9148s

    HW
    Cisco
    all versions

  • Cisco Mds 9148t

    HW
    Cisco
    all versions

  • Cisco Mds 9216

    HW
    Cisco
    all versions

  • Cisco Mds 9216a

    HW
    Cisco
    all versions

  • Cisco Mds 9216i

    HW
    Cisco
    all versions

  • Cisco Mds 9222i

    HW
    Cisco
    all versions

  • Cisco Mds 9506

    HW
    Cisco
    all versions

  • Cisco Mds 9509

    HW
    Cisco
    all versions

  • Cisco Mds 9513

    HW
    Cisco
    all versions

  • Cisco Mds 9706

    HW
    Cisco
    all versions

  • Cisco Mds 9710

    HW
    Cisco
    all versions

  • Cisco Mds 9718

    HW
    Cisco
    all versions

  • Cisco Nx Os

    OS
    Cisco
    6.2\(1\)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-1361CRITICAL9.8PL ✓same product

Cisco NX-OS: nieautoryzowany dostęp do plików przez port TCP 9075

CVE-2018-0310CRITICAL9.8PL ✓same product

Cisco FXOS/NX-OS: buffer overread w Cisco Fabric Services umożliwia DoS lub wyciek danych

CVE-2018-0301CRITICAL9.8PL ✓same product

Cisco NX-OS NX-API — buffer overflow umożliwiający RCE jako root

CVE-2016-1453CRITICAL9.8PL ✓same product

Buffer overflow w funkcji OTV GRE w Cisco NX-OS na urządzeniach Nexus

CVE-2016-1341CRITICAL9.8PL ✓same product

Puste hasło root w Cisco NX-OS na urządzeniach Nexus 2000 Fabric Extender