PT-2020-6952 · Aruba · Aruba Cx Switches Series

Published 2020-09-15 · Updated 2023-12-28 · CVE-2020-7122

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Aruba CX Switches Series versions prior to 10.04.1000

Description The issue is related to memory corruption vulnerabilities in the Aruba CX Switches Series, which could result in Local Denial of Service of the CDP process in the switch. Successful exploitation of these vulnerabilities could be achieved through buffer overflow. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 10.04.1000, update the firmware to version 10.04.1000 or later to resolve the issue. As a temporary workaround, consider restricting access to the CDP process to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-00182

CVE-2020-7122

Affected Products

Aruba Cx Switches Series

References · 6

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7122 · Security Note
• https://bdu.fstec.ru/vul/2024-00182 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7122 · Vendor Advisory
• https://t.me/cvenotify/65506 · Telegram Post
• https://t.me/cvenotify/65168 · Telegram Post