Multiple vulnerabilities in the Cisco Discovery Protocol

-
Component Affected

• ASR  9000  Series Aggregation Services Routers
•  Carrier  Routing  System (CRS)
• Firepower 4100 Series
• Firepower 9300  Security Appliances
•  MS XRy 9000  Router
• MDS 9000  Series  Multilayer Switches
• Network Convergence System  (NCS) 540  Series  Routers
• Network Convergence System  (NCS) 560  Series  Routers
• Network Convergence System  (NCS) 1000  Series
• Network  Convergence System (NCS) 5000  Series
• Network Convergence  System (NCS) 5500  Series
• Network  Convergence  System  (NCS) 6000  Series
• Nexus  1000  Virtual Edge  for VMware  vSphere
• Nexus  1000V Switch for Microsoft Hyper - V
• Nexus  1000V  Switch  for VMware vSphere
• Nexus  3000  Series Switches
• Nexus  5500  Platform  Switches
• Nexus  5600  Platform  Switches
• Nexus  6000  Series Switches
• Nexus  7000  Series Switches
• Nexus  9000  Series Fabric  Switches  in  Application Centric Infrastructure (AO) mode
• Nexus  9000  Series Switches  in  standalone NX-OS mode
• UCS 6200  Series Fabric  Interconnects
• UCS 6300  Series Fabric  Interconnects
• UCS 6400  Series Fabric  Interconnects
Overview
These vulnerabilities  have been reported in Cisco  Discovery Protocol  implementation  for Cisco  FXOS  Software, Cisco  IOS XR
Software, and Cisco NX-OS  Software  which could  allow an  unauthenticated,  adjacent  attacker  to execute  arbitrary code  or  cause
a  reload on an affected device.
Description
1. Remote Code Execution Vulnerability  ( CVE-2020-3119 )
A  vulnerability exists in  Cisco Discovery  Protocol implementation for Cisco NX-OS  Software due to the Cisco Discovery Protocol
parser does not properly validate input for certain fields in a Cisco Discovery  Protocol message that could allow an
unauthenticated,  adjacent attacker to execute arbitrary code or cause a  reload on an affected device. An attacker could exploit
this vulnerability by sending a  malicious  Cisco Discovery  Protocol packet to an affected device.
Successful exploitation of this vulnerability could allow the attacker to cause a  stack overflow, which could allow the attacker to
execute arbitrary code with administrative privileges on an affected device.
2. Denial of Service Vulnerability  ( CVE-2020-3120 )
A vulnerability  exists  in Cisco Discovery  Protocol implementation for Cisco  FXOS Software,  Cisco  IOS  XR Software, and Cisco
NX-OS  Software due to a missing check when the affected software processes  Cisco Discovery Protocol messages. That could
allow an attacker on the local network to execute code or cause a denial of service.  An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device.
Successful exploitation of this vulnerability could allow the attacker to exhaust system memory, causing the device to reload.

Comments

Post a Comment

Popular posts from this blog

Some Dark web Links

-
Image
Here are some of the Forum/Website to visit on dark web related to cybersecurity and hacking. Before visiting this website please follow the steps to be safe on the dark web/ Deepweb. Security Steps to be taken before opening the links: First of All, To browse these dark web forums, first close all active programs and applications in your computer then start Your NordVPN or any Paid and HQ VPN that have TOR service and select Onion Over VPN Server.  Now start Tor Browser and disable Javascript. In this way, you have created a completely secure and untraceable environment for you. If you think Tor Browser gives you full anonymity then you are wrong.  Only premium VPN services can provide you fully secure and untraceable environment. I have tried my hands on many premium VPN services, and I found NordVPN beats its competitor in all features. Disclaimer ⚠ : This info are shared for educational purpose only, neither the website nor creator hold any info or liabl...
Read more

How to join Cyber Cell or Cyber Crime Department in India || Exam or Direct or Skills???

-
Image
 How to join Cyber Cell or Cyber Crime Department in India || Exam or Direct or Skills??? Hello Guys, today's topic is How to join Cyber Cell in India. All of us has dreamed of joining the cybercrime department and working as an officer for the nation. Some of us have tried to search it on the internet asked our colleagues and friends relatives but somewhere we are not able to find the correct and satisfying answer o our question. Don't worry today Career Technology is going help you out to find all your questions answered in a single post. Welcome Everyone :)  Let's get started  HOW TO JOIN CYBER CELL THROUGH EXAM?? In the cyber cell department, there is no specific exam to join the cyber cell. Now What if there is no exam for cyber cell??? You can join cyber cell by applying for the exam of CBI or IB and then after getting selected for this you can apply for the cyber cell. HOW TO JOIN CBI OR IB?? Firstly you need to apply for this post to join cyber cell and to join C...
Read more

ATM HACKING TOOL TRENDING ON DARK WEB

-
Image
ATM HACKING TOOL TRENDING ON DARK WEB Latest hacking tools and devices have a great sale on the dark web, an ATM can be hacked within 15 to 20 minutes by any amateur person too. The one should know basics of it before buying such things, cybersecurity startup knowledge. The person who discovers this is CloudSEK Rakesh Krishnan says "The seller on the dark web has latyest ready-made tools such has malware cards, USB ATM Malware and many more such tools to dispense money from the ATM". HE also said that "Earlier, though these were slightly complicated, now with these devices, anybody can control these machines,” . WHAT HE DISCOVERED? HE talked to the seller as a buyer to many online shops and One of the shops offered him  ATM Malware Card, PIN Descriptor, Trigger Card and an instruction guide which tells how to suspend the cash from the machine. Once installed, it captures all card details stealthily. The amount can be withdrawn using Trigger Card, that d...
Read more