A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition.

Project Subscriptions

Vendors Products
Firepower 4110 Subscribe
Firepower 4112 Subscribe
Firepower 4115 Subscribe
Firepower 4120 Subscribe
Firepower 4125 Subscribe
Firepower 4140 Subscribe
Firepower 4145 Subscribe
Firepower 4150 Subscribe
Firepower 9300 Subscribe
Firepower Extensible Operating System Subscribe
Mds 9100 Subscribe
Mds 9200 Subscribe
Mds 9500 Subscribe
Mds 9700 Subscribe
Nexus 3016 Subscribe
Nexus 3048 Subscribe
Nexus 3064 Subscribe
Nexus 3064-t Subscribe
Nexus 31108pc-v Subscribe
Nexus 31108tc-v Subscribe
Nexus 31128pq Subscribe
Nexus 3132c-z Subscribe
Nexus 3132q Subscribe
Nexus 3132q-v Subscribe
Nexus 3132q-xl Subscribe
Nexus 3164q Subscribe
Nexus 3172 Subscribe
Nexus 3172pq-xl Subscribe
Nexus 3172tq Subscribe
Nexus 3172tq-32t Subscribe
Nexus 3172tq-xl Subscribe
Nexus 3232c Subscribe
Nexus 3264c-e Subscribe
Nexus 3264q Subscribe
Nexus 3408-s Subscribe
Nexus 34180yc Subscribe
Nexus 3432d-s Subscribe
Nexus 3464c Subscribe
Nexus 3524 Subscribe
Nexus 3524-x Subscribe
Nexus 3524-xl Subscribe
Nexus 3548 Subscribe
Nexus 3548-x Subscribe
Nexus 3548-xl Subscribe
Nexus 36180yc-r Subscribe
Nexus 3636c-r Subscribe
Nexus 5548p Subscribe
Nexus 5548up Subscribe
Nexus 5596t Subscribe
Nexus 5596up Subscribe
Nexus 56128p Subscribe
Nexus 5624q Subscribe
Nexus 5648q Subscribe
Nexus 5672up Subscribe
Nexus 5696q Subscribe
Nexus 6001 Subscribe
Nexus 6004 Subscribe
Nexus 7000 Subscribe
Nexus 7700 Subscribe
Nexus 9000v Subscribe
Nexus 92160yc-x Subscribe
Nexus 92300yc Subscribe
Nexus 92304qc Subscribe
Nexus 92348gc-x Subscribe
Nexus 9236c Subscribe
Nexus 9272q Subscribe
Nexus 93108tc-ex Subscribe
Nexus 93108tc-fx Subscribe
Nexus 93120tx Subscribe
Nexus 93128tx Subscribe
Nexus 93180lc-ex Subscribe
Nexus 93180yc-ex Subscribe
Nexus 93180yc-fx Subscribe
Nexus 93216tc-fx2 Subscribe
Nexus 93240yc-fx2 Subscribe
Nexus 9332c Subscribe
Nexus 9332pq Subscribe
Nexus 93360yc-fx2 Subscribe
Nexus 9336c-fx2 Subscribe
Nexus 9336pq Aci Spine Subscribe
Nexus 9348gc-fxp Subscribe
Nexus 9364c Subscribe
Nexus 9372px Subscribe
Nexus 9372px-e Subscribe
Nexus 9372tx Subscribe
Nexus 9372tx-e Subscribe
Nexus 9396px Subscribe
Nexus 9396tx Subscribe
Nexus 9504 Subscribe
Nexus 9508 Subscribe
Nexus 9516 Subscribe
Ucs 6248up Subscribe
Ucs 6296up Subscribe
Ucs 6300 Subscribe
Ucs 6324 Subscribe
Ucs 64108 Subscribe
Ucs 6454 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2020-24788 A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 13 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-13T18:09:30.343Z

Reserved: 2019-12-12T00:00:00

Link: CVE-2020-3517

cve-icon Vulnrichment

Updated: 2024-08-04T07:37:54.679Z

cve-icon NVD

Status : Modified

Published: 2020-08-27T16:15:12.550

Modified: 2024-11-21T05:31:14.100

Link: CVE-2020-3517

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses