PT-2020-6953 · Aruba · Aruba Cx Switches Series

Published 2020-09-15 · Updated 2023-12-28 · CVE-2020-7121

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Aruba CX Switches Series versions prior to 10.04.3021

Description The issue is related to memory corruption vulnerabilities, specifically a buffer overflow, in the Aruba CX Switches Series. Successful exploitation could result in a Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch.

Recommendations For versions prior to 10.04.3021, update the firmware to version 10.04.3021 or later to resolve the issue. As a temporary workaround, consider restricting access to the LLDP process to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-00195

CVE-2020-7121

Affected Products

Aruba Cx Switches Series

References · 6

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7121 · Security Note
• https://bdu.fstec.ru/vul/2024-00195 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7121 · Vendor Advisory
• https://t.me/cvenotify/65167 · Telegram Post
• https://t.me/cvenotify/65505 · Telegram Post