PT-2020-5083 · Cisco · Cisco Video Surveillance 8000 Series Ip Cameras

Published 2020-08-19 · Updated 2021-10-26 · CVE-2020-3505

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance 8000 Series IP Cameras (affected versions not specified)

Description A vulnerability in the Cisco Discovery Protocol could allow an unauthenticated, adjacent attacker to cause a memory leak, leading to a denial of service (DoS) condition on an affected device. The issue is due to incorrect processing of certain Cisco Discovery Protocol packets. An attacker could exploit this by sending specific packets to an affected device, causing it to continuously consume memory, potentially leading to a crash and reload. Note that the attacker must be in the same broadcast domain as the affected device to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Resource Exhaustion

Weakness Enumeration

CWE-401

CWE-400

Related Identifiers

BDU:2020-05673

CVE-2020-3505

Affected Products

Cisco Video Surveillance 8000 Series Ip Cameras

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdp-memleak-k5Z7m55t · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3505 · Security Note
• https://bdu.fstec.ru/vul/2020-05673 · Security Note