PT-2020-1984 · Cisco · Cisco Nx-Os

Published 2020-02-26 · Updated 2020-03-03 · CVE-2020-3175

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches (affected versions not specified)

Description The issue is related to insufficient control of resources during their lifetime, which could allow a remote attacker to cause a denial of service (DoS) condition on an affected device. This can be achieved by sending traffic to the management interface (mgmt0) at very high rates, potentially causing high CPU usage, process crashes, or even full system reboots.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-664

CWE-400

Related Identifiers

BDU:2020-01301

CVE-2020-3175

Affected Products

Cisco Nx-Os

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-3175 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3175 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-mds-ovrld-dos · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01301 · Security Note
• https://cxsecurity.com/cveshow/CVE-2020-3175 · Note