Integer overflow in Cisco Systems, Inc products - CVE-2020-3120

Vulnerability identifier: #VU49026

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-3120

CWE-ID: CWE-190

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow in the Cisco Discovery Protocol implementation. A remote attacker on the local network can send a specially crafted Cisco Discovery Protocol packet, trigger integer overflow and cause a denial of service condition on the target system.

Cisco Network Convergence System 560 Series Routers
Cisco Nexus 3000 Series Switches
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Cisco Nexus 6000 Series Switches
Cisco Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches in ACI Mode
Cisco Nexus 9000 Series Switches NX-OS Mode
Cisco Network Convergence System 540 Series Routers
Nexus 1000V Switch for Microsoft Hyper-V
Cisco Network Convergence System 5000 Series
Network Convergence System 5500 Series
Cisco Network Convergence System 6000 Series Routers
Cisco IOS XRv 9000 Router
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects
UCS 6400 Series Fabric Interconnects
Nexus 1000V Switch for VMware vSphere
Cisco ASR 9000 Series Aggregation Services Routers
Cisco MDS 9000 Series Multilayer Switches
Cisco Network Convergence System 1000 Series
Cisco Carrier Routing System
Cisco Firepower 4100 Series Next-Generation Firewall
Nexus 1000 Virtual Edge for VMware vSphere
Cisco FXOS
Cisco NX-OS
Cisco IOS XR
Cisco Firepower 9300 Security Appliance

Install updates from vendor's website.

Cisco FXOS - addressed in versions 2.3.1.173, 2.6.1.187, 2.7.1.106
UCS 6200 Series Fabric Interconnects - addressed in versions 3.2.3n, 4.0.4g
UCS 6300 Series Fabric Interconnects - addressed in versions 3.2.3n, 4.0.4g
Cisco NX-OS - addressed in versions 5.2.1 SV3.4.1b, 5.2.1 SV5.1.3, 6.2.24, 6.2.29, 7.0.3 I7.8, 7.3.5 D1.1, 7.3.6 N1.1, 8.2.5, 8.4.1a, 8.4.2, 9.3.2, 13.2.9b, 14.2.1j
UCS 6400 Series Fabric Interconnects - addressed in versions 3.2.3n, 4.0.4g
Cisco Firepower 9300 Security Appliance - addressed in versions 2.3.1.173, 2.4.1.266, 2.6.1.187, 2.7.1.106, 2.8.1.105
Nexus 1000V Switch for VMware vSphere - update to 5.2.1 SV5.1.3
Cisco IOS XR - addressed in versions asr9k x64 6.5.3.CSCvr78185, asr9k px 6.4.2.CSCvr78185, asr9k px 6.5.3.CSCvr78185, iosxrwbd 6.6.12.CSCvr78185, ncs5k 6.5.3.CSCvr78185, ncs6k 5.2.5.CSCvr78185, ncs540 6.5.3.CSCvr78185, ncs540l 7.0.1.CSCvr78185, ncs560 6.6.25.CSCvr78185, ncs5500 6.5.3.CSCvr78185, xrv9k 6.5.3.CSCvr78185, hfr px 6.4.2.CSCvr78185, 6.6.3, 7.0.2

• http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-fxnxos-iosxr-cdp-dos

• Denial of service in Cisco FXOS, IOS XR and NX-OS