CVE Vulnerabilities

CVE-2020-3232

Published: Jun 03, 2020 | Modified: Oct 19, 2021
CVSS 3.x
7.7
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Affected Software

Name Vendor Start Version End Version
Ios_xe Cisco 3.16.0s (including) 3.16.0s (including)
Ios_xe Cisco 3.16.1as (including) 3.16.1as (including)
Ios_xe Cisco 3.16.2as (including) 3.16.2as (including)
Ios_xe Cisco 3.16.3as (including) 3.16.3as (including)
Ios_xe Cisco 3.16.4bs (including) 3.16.4bs (including)
Ios_xe Cisco 3.16.4s (including) 3.16.4s (including)
Ios_xe Cisco 3.16.5as (including) 3.16.5as (including)
Ios_xe Cisco 3.16.5s (including) 3.16.5s (including)
Ios_xe Cisco 3.16.6bs (including) 3.16.6bs (including)
Ios_xe Cisco 3.16.6s (including) 3.16.6s (including)
Ios_xe Cisco 3.16.7bs (including) 3.16.7bs (including)
Ios_xe Cisco 3.16.7s (including) 3.16.7s (including)
Ios_xe Cisco 3.16.8s (including) 3.16.8s (including)
Ios_xe Cisco 3.16.9s (including) 3.16.9s (including)
Ios_xe Cisco 3.16.10s (including) 3.16.10s (including)
Ios_xe Cisco 3.17.0s (including) 3.17.0s (including)
Ios_xe Cisco 3.17.1s (including) 3.17.1s (including)
Ios_xe Cisco 3.17.2s (including) 3.17.2s (including)
Ios_xe Cisco 3.17.3s (including) 3.17.3s (including)
Ios_xe Cisco 3.17.4s (including) 3.17.4s (including)
Ios_xe Cisco 3.18.0s (including) 3.18.0s (including)
Ios_xe Cisco 3.18.0sp (including) 3.18.0sp (including)
Ios_xe Cisco 3.18.1gsp (including) 3.18.1gsp (including)
Ios_xe Cisco 3.18.1hsp (including) 3.18.1hsp (including)
Ios_xe Cisco 3.18.1isp (including) 3.18.1isp (including)
Ios_xe Cisco 3.18.1s (including) 3.18.1s (including)
Ios_xe Cisco 3.18.1sp (including) 3.18.1sp (including)
Ios_xe Cisco 3.18.2s (including) 3.18.2s (including)
Ios_xe Cisco 3.18.2sp (including) 3.18.2sp (including)
Ios_xe Cisco 3.18.3s (including) 3.18.3s (including)
Ios_xe Cisco 3.18.3sp (including) 3.18.3sp (including)
Ios_xe Cisco 3.18.4s (including) 3.18.4s (including)
Ios_xe Cisco 3.18.4sp (including) 3.18.4sp (including)
Ios_xe Cisco 16.3.10 (including) 16.3.10 (including)
Ios_xe Cisco 16.5.1 (including) 16.5.1 (including)
Ios_xe Cisco 16.5.2 (including) 16.5.2 (including)
Ios_xe Cisco 16.5.3 (including) 16.5.3 (including)
Ios_xe Cisco 16.6.1 (including) 16.6.1 (including)
Ios_xe Cisco 16.6.2 (including) 16.6.2 (including)
Ios_xe Cisco 16.6.3 (including) 16.6.3 (including)
Ios_xe Cisco 16.6.4 (including) 16.6.4 (including)
Ios_xe Cisco 16.7.1 (including) 16.7.1 (including)
Ios_xe Cisco 16.7.2 (including) 16.7.2 (including)
Ios_xe Cisco 16.7.3 (including) 16.7.3 (including)
Ios_xe Cisco 16.8.1 (including) 16.8.1 (including)
Ios_xe Cisco 16.8.1a (including) 16.8.1a (including)
Ios_xe Cisco 16.8.1b (including) 16.8.1b (including)
Ios_xe Cisco 16.8.1c (including) 16.8.1c (including)
Ios_xe Cisco 16.8.1d (including) 16.8.1d (including)
Ios_xe Cisco 16.8.1e (including) 16.8.1e (including)
Ios_xe Cisco 16.8.1s (including) 16.8.1s (including)
Ios_xe Cisco 16.9.1 (including) 16.9.1 (including)
Ios_xe Cisco 16.9.1a (including) 16.9.1a (including)
Ios_xe Cisco 16.9.1b (including) 16.9.1b (including)
Ios_xe Cisco 16.9.1c (including) 16.9.1c (including)
Ios_xe Cisco 16.9.1d (including) 16.9.1d (including)
Ios_xe Cisco 16.9.1s (including) 16.9.1s (including)

References