CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3397

A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete input validation of a specific type of BGP MVPN update message. An attacker could exploit this vulnerability by sending this specific, valid BGP MVPN update message to a targeted device. A successful exploit could allow the attacker to cause one of the BGP-related routing applications to restart multiple times, leading to a system-level restart. Note: The Cisco implementation of BGP accepts incoming BGP traffic from only explicitly configured peers. To exploit this vulnerability, an attacker must send a specific BGP MVPN update message over an established TCP connection that appears to come from a trusted BGP peer. To do so, the attacker must obtain information about the BGP peers in the trusted network of the affected system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 66.5%

CVSS Severity

CVSS v3 Score 8.6

CVSS v2 Score 7.1

References

Products affected by CVE-2020-3397

Cisco » Nexus 3016 » Version: N/A

cpe:2.3:h:cisco:nexus_3016:-
Cisco » Nexus 3048 » Version: N/A

cpe:2.3:h:cisco:nexus_3048:-
Cisco » Nexus 3064-T » Version: N/A

cpe:2.3:h:cisco:nexus_3064-t:-
Cisco » Nexus 3064 » Version: N/A

cpe:2.3:h:cisco:nexus_3064:-
Cisco » Nexus 31108pc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108pc-v:-
Cisco » Nexus 31108tc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108tc-v:-
Cisco » Nexus 31128pq » Version: N/A

cpe:2.3:h:cisco:nexus_31128pq:-
Cisco » Nexus 3132c-Z » Version: N/A

cpe:2.3:h:cisco:nexus_3132c-z:-
Cisco » Nexus 3132q-V » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-v:-
Cisco » Nexus 3132q-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-xl:-
Cisco » Nexus 3132q » Version: N/A

cpe:2.3:h:cisco:nexus_3132q:-
Cisco » Nexus 3164q » Version: N/A

cpe:2.3:h:cisco:nexus_3164q:-
Cisco » Nexus 3172 » Version: N/A

cpe:2.3:h:cisco:nexus_3172:-
Cisco » Nexus 3172pq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172pq-xl:-
Cisco » Nexus 3172tq-32t » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq-32t:-
Cisco » Nexus 3172tq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq-xl:-
Cisco » Nexus 3172tq » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq:-
Cisco » Nexus 3232c » Version: N/A

cpe:2.3:h:cisco:nexus_3232c:-
Cisco » Nexus 3264c-E » Version: N/A

cpe:2.3:h:cisco:nexus_3264c-e:-
Cisco » Nexus 3264q » Version: N/A

cpe:2.3:h:cisco:nexus_3264q:-
Cisco » Nexus 3408-S » Version: N/A

cpe:2.3:h:cisco:nexus_3408-s:-
Cisco » Nexus 34180yc » Version: N/A

cpe:2.3:h:cisco:nexus_34180yc:-
Cisco » Nexus 3432d-S » Version: N/A

cpe:2.3:h:cisco:nexus_3432d-s:-
Cisco » Nexus 3464c » Version: N/A

cpe:2.3:h:cisco:nexus_3464c:-
Cisco » Nexus 3524-X » Version: N/A

cpe:2.3:h:cisco:nexus_3524-x:-
Cisco » Nexus 3524-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3524-xl:-
Cisco » Nexus 3524 » Version: N/A

cpe:2.3:h:cisco:nexus_3524:-
Cisco » Nexus 3548-X » Version: N/A

cpe:2.3:h:cisco:nexus_3548-x:-
Cisco » Nexus 3548-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3548-xl:-
Cisco » Nexus 3548 » Version: N/A

cpe:2.3:h:cisco:nexus_3548:-
Cisco » Nexus 36180yc-R » Version: N/A

cpe:2.3:h:cisco:nexus_36180yc-r:-
Cisco » Nexus 3636c-R » Version: N/A

cpe:2.3:h:cisco:nexus_3636c-r:-
Cisco » Nexus 92160yc-X » Version: N/A

cpe:2.3:h:cisco:nexus_92160yc-x:-
Cisco » Nexus 92300yc » Version: N/A

cpe:2.3:h:cisco:nexus_92300yc:-
Cisco » Nexus 92304qc » Version: N/A

cpe:2.3:h:cisco:nexus_92304qc:-
Cisco » Nexus 92348gc-X » Version: N/A

cpe:2.3:h:cisco:nexus_92348gc-x:-
Cisco » Nexus 9236c » Version: N/A

cpe:2.3:h:cisco:nexus_9236c:-
Cisco » Nexus 9272q » Version: N/A

cpe:2.3:h:cisco:nexus_9272q:-
Cisco » Nexus 93108tc-Ex » Version: N/A

cpe:2.3:h:cisco:nexus_93108tc-ex:-
Cisco » Nexus 93108tc-Fx » Version: N/A

cpe:2.3:h:cisco:nexus_93108tc-fx:-
Cisco » Nexus 93120tx » Version: N/A

cpe:2.3:h:cisco:nexus_93120tx:-
Cisco » Nexus 93128tx » Version: N/A

cpe:2.3:h:cisco:nexus_93128tx:-
Cisco » Nexus 93180lc-Ex » Version: N/A

cpe:2.3:h:cisco:nexus_93180lc-ex:-
Cisco » Nexus 93180yc-Ex » Version: N/A

cpe:2.3:h:cisco:nexus_93180yc-ex:-
Cisco » Nexus 93180yc-Fx » Version: N/A

cpe:2.3:h:cisco:nexus_93180yc-fx:-
Cisco » Nexus 93216tc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93216tc-fx2:-
Cisco » Nexus 93240yc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93240yc-fx2:-
Cisco » Nexus 9332c » Version: N/A

cpe:2.3:h:cisco:nexus_9332c:-
Cisco » Nexus 9332pq » Version: N/A

cpe:2.3:h:cisco:nexus_9332pq:-
Cisco » Nexus 93360yc-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_93360yc-fx2:-
Cisco » Nexus 9336c-Fx2 » Version: N/A

cpe:2.3:h:cisco:nexus_9336c-fx2:-
Cisco » Nexus 9336pq Aci Spine » Version: N/A

cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-
Cisco » Nexus 9348gc-Fxp » Version: N/A

cpe:2.3:h:cisco:nexus_9348gc-fxp:-
Cisco » Nexus 9364c » Version: N/A

cpe:2.3:h:cisco:nexus_9364c:-
Cisco » Nexus 9372px-E » Version: N/A

cpe:2.3:h:cisco:nexus_9372px-e:-
Cisco » Nexus 9372px » Version: N/A

cpe:2.3:h:cisco:nexus_9372px:-
Cisco » Nexus 9372tx-E » Version: N/A

cpe:2.3:h:cisco:nexus_9372tx-e:-
Cisco » Nexus 9372tx » Version: N/A

cpe:2.3:h:cisco:nexus_9372tx:-
Cisco » Nexus 9396px » Version: N/A

cpe:2.3:h:cisco:nexus_9396px:-
Cisco » Nexus 9396tx » Version: N/A

cpe:2.3:h:cisco:nexus_9396tx:-
Cisco » Nexus 9504 » Version: N/A

cpe:2.3:h:cisco:nexus_9504:-
Cisco » Nexus 9508 » Version: N/A

cpe:2.3:h:cisco:nexus_9508:-
Cisco » Nexus 9516 » Version: N/A

cpe:2.3:h:cisco:nexus_9516:-
Cisco » Nx-Os » Version: N/A

cpe:2.3:o:cisco:nx-os:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-3397

Products

Pricing

Contact Us