Vulnerability-Lookup

BDU:2020-04140 (CVE-2020-3517)

Vulnerability from fstec – Published: 2020-09-03 – Updated: 2020-09-03 – View on bdu.fstec.ru Fixed

Title

Уязвимость компонента Cisco Fabric Services сетевой операционной системы Cisco NX-OS устройств Cisco, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость компонента Cisco Fabric Services сетевой операционной системы Cisco NX-OS устройств Cisco связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

8.6 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-476 - Разыменование указателя NULL

Aliases

CVE-2020-3517

References

2 references

URL
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-…
https://nvd.nist.gov/vuln/detail/CVE-2020-3517

Impacted products

2 products from 2 vendors

Vendors

Cisco Systems, Inc.

Products

NX-OS, FX-OS

Versions

6.2 (NX-OS), 7.0(3)IA7 (NX-OS), 7.0(3)IM7 (NX-OS), от 1.1 до 1.1.4.179 (FX-OS), от 2.0 до 2.0.1.153 (FX-OS), от 2.1.1.86 до 2.1.1.86 (FX-OS), от 2.2 до 2.2.1.70 (FX-OS), от 5.0(3)A1 до 5.0(3)U5 включительно (NX-OS), 5.2(1)N1 (NX-OS), от 6.0(2)A1 до 6.0(2)U6 включительно (NX-OS), от 6.1(2)I1 до 6.1(2)I3 включительно (NX-OS), от 7.0(0)N1 до 7.0(2)N1 включительно (NX-OS), от 7.0(3)F1 до 7.0(3)F3 включительно (NX-OS), от 7.0(3)I1 до 7.0(3)I7 включительно (NX-OS), 7.0(3)IX1 (NX-OS), от 7.0(3)N1 до 7.0(8)N1 включительно (NX-OS), от 7.1(0)N1 до 7.1(5)N1 включительно (NX-OS), 7.2(0)D1 (NX-OS), 7.2(0)N1 (NX-OS), 7.2(1)D1 (NX-OS), 7.2(1)N1 (NX-OS), 7.2(2)D1 (NX-OS), 7.3(0)DX (NX-OS), 7.3(0)DY (NX-OS), 7.3(0)N1 (NX-OS), 7.3(1)D1 (NX-OS), 7.3(1)DY (NX-OS), 7.3(1)N1 (NX-OS), 7.3(2)D1 (NX-OS), 7.3(2)N1 (NX-OS), от 8.0 до 8.4 включительно (NX-OS), 7.3(4)N1 (NX-OS), 7.3(3)D1 (NX-OS), 7.0(3)IC4 (NX-OS), 7.0(3)IM3 (NX-OS), 7.3(4)D1 (NX-OS), 7.3(5)N1 (NX-OS), 7.3(6)N1 (NX-OS), 7.3(5)D1 (NX-OS), 7.3(7)N1 (NX-OS)

Product types

Operating system

Platforms

Cisco Systems, Inc. - - Cisco UCS 6200, Inc. - - Cisco UCS 6300, Inc. - - Cisco MDS 9000 Series Multilayer Switches, Inc. - - Cisco Nexus 3000 Series Switches, Inc. - - Cisco Nexus 7000 Series Switches, Inc. - - Cisco Nexus 5500 Platform Switches, Inc. - - Cisco Nexus 5600 Platform Switches, Inc. - - Cisco Nexus 6000 Series Switches, Inc. - - Cisco UCS 6400, Inc. - - Nexus 9000 Series in Standalone NX-OS Mode, Inc. NX-OS 6.2, Inc. NX-OS 7.0(3)IA7, Inc. NX-OS 7.0(3)IM7, Inc. FX-OS от 1.1 до 1.1.4.179 Cisco Firepower 4100 Series, Inc. FX-OS от 2.0 до 2.0.1.153 Cisco Firepower 4100 Series, Inc. FX-OS от 2.1.1.86 до 2.1.1.86 Cisco Firepower 4100 Series, Inc. FX-OS от 2.2 до 2.2.1.70 Cisco Firepower 4100 Series, Inc. FX-OS от 1.1 до 1.1.4.179 Cisco Firepower 9300 Security Appliance, Inc. FX-OS от 2.0 до 2.0.1.153 Cisco Firepower 9300 Security Appliance, Inc. FX-OS от 2.1.1.86 до 2.1.1.86 Cisco Firepower 9300 Security Appliance, Inc. FX-OS от 2.2 до 2.2.1.70 Cisco Firepower 9300 Security Appliance, Inc. NX-OS от 5.0(3)A1 до 5.0(3)U5 включительно, Inc. NX-OS 5.2(1)N1, Inc. NX-OS от 6.0(2)A1 до 6.0(2)U6 включительно, Inc. NX-OS от 6.1(2)I1 до 6.1(2)I3 включительно, Inc. NX-OS от 7.0(0)N1 до 7.0(2)N1 включительно, Inc. NX-OS от 7.0(3)F1 до 7.0(3)F3 включительно, Inc. NX-OS от 7.0(3)I1 до 7.0(3)I7 включительно, Inc. NX-OS 7.0(3)IX1, Inc. NX-OS от 7.0(3)N1 до 7.0(8)N1 включительно, Inc. NX-OS от 7.1(0)N1 до 7.1(5)N1 включительно, Inc. NX-OS 7.2(0)D1, Inc. NX-OS 7.2(0)N1, Inc. NX-OS 7.2(1)D1, Inc. NX-OS 7.2(1)N1, Inc. NX-OS 7.2(2)D1, Inc. NX-OS 7.3(0)DX, Inc. NX-OS 7.3(0)DY, Inc. NX-OS 7.3(0)N1, Inc. NX-OS 7.3(1)D1, Inc. NX-OS 7.3(1)DY, Inc. NX-OS 7.3(1)N1, Inc. NX-OS 7.3(2)D1, Inc. NX-OS 7.3(2)N1, Inc. NX-OS от 8.0 до 8.4 включительно, Inc. NX-OS 7.3(4)N1, Inc. NX-OS 7.3(3)D1, Inc. NX-OS 7.0(3)IC4, Inc. NX-OS 7.0(3)IM3, Inc. NX-OS 7.3(4)D1, Inc. NX-OS 7.3(5)N1, Inc. NX-OS 7.3(6)N1, Inc. NX-OS 7.3(5)D1, Inc. NX-OS 7.3(7)N1

Mitigations

Использование рекомендаций: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "6.2 (NX-OS), 7.0(3)IA7 (NX-OS), 7.0(3)IM7 (NX-OS), \u043e\u0442 1.1 \u0434\u043e 1.1.4.179 (FX-OS), \u043e\u0442 2.0 \u0434\u043e 2.0.1.153 (FX-OS), \u043e\u0442 2.1.1.86 \u0434\u043e 2.1.1.86 (FX-OS), \u043e\u0442 2.2 \u0434\u043e 2.2.1.70 (FX-OS), \u043e\u0442 5.0(3)A1 \u0434\u043e 5.0(3)U5 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), 5.2(1)N1 (NX-OS), \u043e\u0442 6.0(2)A1 \u0434\u043e 6.0(2)U6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), \u043e\u0442 6.1(2)I1 \u0434\u043e 6.1(2)I3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), \u043e\u0442 7.0(0)N1 \u0434\u043e 7.0(2)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), \u043e\u0442 7.0(3)F1 \u0434\u043e 7.0(3)F3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), \u043e\u0442 7.0(3)I1 \u0434\u043e 7.0(3)I7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), 7.0(3)IX1 (NX-OS), \u043e\u0442 7.0(3)N1 \u0434\u043e 7.0(8)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), \u043e\u0442 7.1(0)N1 \u0434\u043e 7.1(5)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), 7.2(0)D1 (NX-OS), 7.2(0)N1 (NX-OS), 7.2(1)D1 (NX-OS), 7.2(1)N1 (NX-OS), 7.2(2)D1 (NX-OS), 7.3(0)DX (NX-OS), 7.3(0)DY (NX-OS), 7.3(0)N1 (NX-OS), 7.3(1)D1 (NX-OS), 7.3(1)DY (NX-OS), 7.3(1)N1 (NX-OS), 7.3(2)D1 (NX-OS), 7.3(2)N1 (NX-OS), \u043e\u0442 8.0 \u0434\u043e 8.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (NX-OS), 7.3(4)N1 (NX-OS), 7.3(3)D1 (NX-OS), 7.0(3)IC4 (NX-OS), 7.0(3)IM3 (NX-OS), 7.3(4)D1 (NX-OS), 7.3(5)N1 (NX-OS), 7.3(6)N1 (NX-OS), 7.3(5)D1 (NX-OS), 7.3(7)N1 (NX-OS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "26.08.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.09.2020",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.09.2020",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-04140",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-3517",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "NX-OS, FX-OS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems, Inc. - - Cisco UCS 6200, Cisco Systems, Inc. - - Cisco UCS 6300, Cisco Systems, Inc. - - Cisco MDS 9000 Series Multilayer Switches, Cisco Systems, Inc. - - Cisco Nexus 3000 Series Switches, Cisco Systems, Inc. - - Cisco Nexus 7000 Series Switches, Cisco Systems, Inc. - - Cisco Nexus 5500 Platform Switches, Cisco Systems, Inc. - - Cisco Nexus 5600 Platform Switches, Cisco Systems, Inc. - - Cisco Nexus 6000 Series Switches, Cisco Systems, Inc. - - Cisco UCS 6400, Cisco Systems, Inc. - - Nexus 9000 Series in Standalone NX-OS Mode, Cisco Systems, Inc. NX-OS 6.2 , Cisco Systems, Inc. NX-OS 7.0(3)IA7 , Cisco Systems, Inc. NX-OS 7.0(3)IM7 , Cisco Systems, Inc. FX-OS \u043e\u0442 1.1 \u0434\u043e 1.1.4.179 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 2.0 \u0434\u043e 2.0.1.153 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 2.1.1.86 \u0434\u043e 2.1.1.86 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 2.2 \u0434\u043e 2.2.1.70 Cisco Firepower 4100 Series, Cisco Systems, Inc. FX-OS \u043e\u0442 1.1 \u0434\u043e 1.1.4.179 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS \u043e\u0442 2.0 \u0434\u043e 2.0.1.153 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS \u043e\u0442 2.1.1.86 \u0434\u043e 2.1.1.86 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. FX-OS \u043e\u0442 2.2 \u0434\u043e 2.2.1.70 Cisco Firepower 9300 Security Appliance, Cisco Systems, Inc. NX-OS \u043e\u0442 5.0(3)A1 \u0434\u043e 5.0(3)U5 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS 5.2(1)N1 , Cisco Systems, Inc. NX-OS \u043e\u0442 6.0(2)A1 \u0434\u043e 6.0(2)U6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS \u043e\u0442 6.1(2)I1 \u0434\u043e 6.1(2)I3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS \u043e\u0442 7.0(0)N1 \u0434\u043e 7.0(2)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS \u043e\u0442 7.0(3)F1 \u0434\u043e 7.0(3)F3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS \u043e\u0442 7.0(3)I1 \u0434\u043e 7.0(3)I7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS 7.0(3)IX1 , Cisco Systems, Inc. NX-OS \u043e\u0442 7.0(3)N1 \u0434\u043e 7.0(8)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS \u043e\u0442 7.1(0)N1 \u0434\u043e 7.1(5)N1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS 7.2(0)D1 , Cisco Systems, Inc. NX-OS 7.2(0)N1 , Cisco Systems, Inc. NX-OS 7.2(1)D1 , Cisco Systems, Inc. NX-OS 7.2(1)N1 , Cisco Systems, Inc. NX-OS 7.2(2)D1 , Cisco Systems, Inc. NX-OS 7.3(0)DX , Cisco Systems, Inc. NX-OS 7.3(0)DY , Cisco Systems, Inc. NX-OS 7.3(0)N1 , Cisco Systems, Inc. NX-OS 7.3(1)D1 , Cisco Systems, Inc. NX-OS 7.3(1)DY , Cisco Systems, Inc. NX-OS 7.3(1)N1 , Cisco Systems, Inc. NX-OS 7.3(2)D1 , Cisco Systems, Inc. NX-OS 7.3(2)N1 , Cisco Systems, Inc. NX-OS \u043e\u0442 8.0 \u0434\u043e 8.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems, Inc. NX-OS 7.3(4)N1 , Cisco Systems, Inc. NX-OS 7.3(3)D1 , Cisco Systems, Inc. NX-OS 7.0(3)IC4 , Cisco Systems, Inc. NX-OS 7.0(3)IM3 , Cisco Systems, Inc. NX-OS 7.3(4)D1 , Cisco Systems, Inc. NX-OS 7.3(5)N1 , Cisco Systems, Inc. NX-OS 7.3(6)N1 , Cisco Systems, Inc. NX-OS 7.3(5)D1 , Cisco Systems, Inc. NX-OS 7.3(7)N1 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Cisco Fabric Services \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco NX-OS \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f NULL (CWE-476)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Cisco Fabric Services \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco NX-OS \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Cisco \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-3517",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-476",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,6)"
}

CVE-2020-3517 (GCVE-0-2020-3517)

Vulnerability from cvelistv5 – Published: 2020-08-27 15:40 – Updated: 2024-11-13 18:09

Title

Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability

Summary

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition.

Severity

8.6 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-13 17:13 UTC

CWE

CWE-476

Assigner

cisco mitre root

References

1 reference

URL	Tags
https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco NX-OS Software	Affected: n/a

Date Public

2020-08-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T07:37:54.679Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20200826 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2020-3517",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-13T17:13:07.454503Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-13T18:09:30.343Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco NX-OS Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2020-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-27T15:40:48.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20200826 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd"
        }
      ],
      "source": {
        "advisory": "cisco-sa-fxos-nxos-cfs-dos-dAmnymbd",
        "defect": [
          [
            "CSCvt39630",
            "CSCvt46835",
            "CSCvt46837",
            "CSCvt46838",
            "CSCvt46839",
            "CSCvt46877"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2020-08-26T16:00:00",
          "ID": "CVE-2020-3517",
          "STATE": "PUBLIC",
          "TITLE": "Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco NX-OS Software",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "8.6",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-476"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20200826 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-cfs-dos-dAmnymbd"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-fxos-nxos-cfs-dos-dAmnymbd",
          "defect": [
            [
              "CSCvt39630",
              "CSCvt46835",
              "CSCvt46837",
              "CSCvt46838",
              "CSCvt46839",
              "CSCvt46877"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2020-3517",
    "datePublished": "2020-08-27T15:40:48.124Z",
    "dateReserved": "2019-12-12T00:00:00.000Z",
    "dateUpdated": "2024-11-13T18:09:30.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.