CVE-2020-3118

Description

A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

• 8.8CVSS 3.0, Highfrom the CNA (cisco)CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What to do

• Apply updates per vendor instructions.CISA KEV required action

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Timeline

1. 5 Feb 2020 Published
2. 3 Nov 2021 CVE-2020-3118 added to CISA KEV
3. 3 Nov 2021 Added to the CISA KEV catalogue

Weakness

• CWE-134

References

• 20200205 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerabilityvendor-advisoryx_refsource_CISCO
• packetstormsecurity.comx_refsource_MISC