Input validation error in Cisco Systems, Inc products - CVE-2023-20200

Vulnerability identifier: #VU79993

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-20200

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the Simple Network Management Protocol (SNMP) service. A remote user can send a specially crafted SNMP request and perform a denial of service (DoS) attack.

Firepower 9300 Series Security Appliances
Firepower 4100 Series Security Appliances
UCS 6300 Series Fabric Interconnects
Cisco FXOS
Cisco UCS Manager

Install update from vendor's website.

Cisco FXOS - addressed in versions 2.2.2.71, 2.2.2.83, 2.2.2.86, 2.2.2.91, 2.2.2.97, 2.2.2.101, 2.2.2.137, 2.2.2.148, 2.2.2.149, 2.3.1.99, 2.3.1.110, 2.3.1.111, 2.3.1.130, 2.3.1.144, 2.3.1.145, 2.3.1.155, 2.3.1.166, 2.3.1.173, 2.3.1.179, 2.3.1.180, 2.3.1.190, 2.3.1.215, 2.3.1.216, 2.3.1.219, 2.3.1.230, 2.4.1.101, 2.4.1.214, 2.4.1.222, 2.4.1.234, 2.4.1.238, 2.4.1.244, 2.4.1.249, 2.4.1.252, 2.4.1.266, 2.4.1.268, 2.4.1.273, 2.6.1.131, 2.6.1.157, 2.6.1.166, 2.6.1.169, 2.6.1.174, 2.6.1.187, 2.6.1.192, 2.6.1.204, 2.6.1.214, 2.6.1.224, 2.6.1.229, 2.6.1.230, 2.6.1.238, 2.6.1.239, 2.6.1.254, 2.6.1.259, 2.6.1.264, 2.7.1.92, 2.7.1.98, 2.7.1.106, 2.7.1.122, 2.7.1.131, 2.7.1.143, 2.8.1.105, 2.8.1.125, 2.8.1.139, 2.8.1.143, 2.8.1.152, 2.8.1.162, 2.8.1.164, 2.8.1.172, 2.8.1.186, 2.8.1.190, 2.8.1.198, 2.9.1.131, 2.9.1.135, 2.9.1.143, 2.9.1.150, 2.9.1.158, 2.10.1.159, 2.10.1.166, 2.10.1.179, 2.10.1.207, 2.10.1.234, 2.10.1.245, 2.11.1.154, 2.11.1.182, 2.11.1.200, 2.12.0.31, 2.12.0.432, 2.12.0.450, 2.12.0.467, 2.13.0.198, 2.13.0.212
Cisco UCS Manager - addressed in versions 4.1(3l)UCSM, 4.2(3d)UCSM

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fp-ucsfi-snmp-dos-qtv69NAO

• Denial of service in Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects