NULL pointer dereference in Cisco Systems, Inc products - CVE-2020-3517
Published: August 27, 2020
Vulnerability identifier: #VU46104
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-3517
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the Cisco Fabric Services component . A remote attacker can send malicious Cisco Fabric Services messages and perform a denial of service (DoS) attack.
Affected software
Cisco Nexus 9000 Series Switches NX-OS Mode
Cisco Nexus 3000 Series Switches
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects
UCS 6400 Series Fabric Interconnects
Cisco Nexus 5500 Series Switches
Cisco Nexus 5600 Series Switches
Cisco Nexus 6000 Series Switches
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 7000 Series Switches
Cisco NX-OS
Cisco FXOS
Cisco Firepower 4100 Series Next-Generation Firewall
Cisco Firepower 9300 Security Appliance
Cisco Nexus 3000 Series Switches
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects
UCS 6400 Series Fabric Interconnects
Cisco Nexus 5500 Series Switches
Cisco Nexus 5600 Series Switches
Cisco Nexus 6000 Series Switches
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 7000 Series Switches
Cisco NX-OS
Cisco FXOS
Cisco Firepower 4100 Series Next-Generation Firewall
Cisco Firepower 9300 Security Appliance
How to mitigate CVE-2020-3517
Install updates from vendor's website.
Cisco Nexus 9000 Series Switches NX-OS Mode - update to 8.2.6
Cisco Nexus 3000 Series Switches - update to 8.2.6
Cisco FXOS - addressed in versions 1.1.4.179, 2.0.1.153, 2.1.1.86, 2.2.1.70
Cisco Firepower 4100 Series Next-Generation Firewall - addressed in versions 1.1.4.179, 2.0.1.150, 2.1.1.86, 2.2.1.70, 2.2.2.14, 92.3.1.2047
Cisco Firepower 9300 Security Appliance - addressed in versions 1.1.4.179, 2.0.1.150, 2.1.1.86, 2.2.1.70, 2.2.2.14, 92.3.1.2047
UCS 6200 Series Fabric Interconnects - addressed in versions 3.2.3o UCSM, 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
UCS 6300 Series Fabric Interconnects - addressed in versions 3.2.3o UCSM, 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
UCS 6400 Series Fabric Interconnects - addressed in versions 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
Cisco Nexus 5600 Series Switches - update to 7.3.8 N1.1
Cisco Nexus 6000 Series Switches - update to 7.3.8 N1.1
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 7.3.6 D1.1, 8.2.6
Cisco Nexus 7000 Series Switches - addressed in versions 7.3.6 D1.1, 8.2.6
Cisco Nexus 3000 Series Switches - update to 8.2.6
Cisco FXOS - addressed in versions 1.1.4.179, 2.0.1.153, 2.1.1.86, 2.2.1.70
Cisco Firepower 4100 Series Next-Generation Firewall - addressed in versions 1.1.4.179, 2.0.1.150, 2.1.1.86, 2.2.1.70, 2.2.2.14, 92.3.1.2047
Cisco Firepower 9300 Security Appliance - addressed in versions 1.1.4.179, 2.0.1.150, 2.1.1.86, 2.2.1.70, 2.2.2.14, 92.3.1.2047
UCS 6200 Series Fabric Interconnects - addressed in versions 3.2.3o UCSM, 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
UCS 6300 Series Fabric Interconnects - addressed in versions 3.2.3o UCSM, 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
UCS 6400 Series Fabric Interconnects - addressed in versions 4.0.4i UCSM, 4.1.1c UCSM, 4.1.2a UCSM
Cisco Nexus 5600 Series Switches - update to 7.3.8 N1.1
Cisco Nexus 6000 Series Switches - update to 7.3.8 N1.1
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 7.3.6 D1.1, 8.2.6
Cisco Nexus 7000 Series Switches - addressed in versions 7.3.6 D1.1, 8.2.6