csirt@kutim:~/threat-intel/cve/CVE-2020-3517

Katalog CVE

CVSS 8.6 · High EPSS 1,4%

Kerentanan NULL Pointer Dereference pada cisco firepower extensible operating system, cisco nx-os. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition.

Rincian

Terbit di NVD
27 Agustus 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-476: NULL Pointer Dereference
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 71,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco firepower extensible operating system Versi 1.1 hingga sebelum 1.1.4.179
cisco firepower extensible operating system Versi 2.0 hingga sebelum 2.0.1.153
cisco firepower extensible operating system Versi 2.1 hingga sebelum 2.1.1.86
cisco firepower extensible operating system Versi 2.2 hingga sebelum 2.2.1.70
cisco nx-os Versi 6.0(2)a3(1)
cisco nx-os Versi 6.0(2)a3(2)
cisco nx-os Versi 6.0(2)a3(4)
cisco nx-os Versi 6.0(2)a4(1)
cisco nx-os Versi 6.0(2)a4(2)
cisco nx-os Versi 6.0(2)a4(3)
cisco nx-os Versi 6.0(2)a4(4)
cisco nx-os Versi 6.0(2)a4(5)
cisco nx-os Versi 6.0(2)a4(6)
cisco nx-os Versi 6.0(2)a6(1)
cisco nx-os Versi 6.0(2)a6(1a)
cisco nx-os Versi 6.0(2)a6(2)
cisco nx-os Versi 6.0(2)a6(2a)
cisco nx-os Versi 6.0(2)a6(3)
cisco nx-os Versi 6.0(2)a6(3a)
cisco nx-os Versi 6.0(2)a6(4)
cisco nx-os Versi 6.0(2)a6(4a)
cisco nx-os Versi 6.0(2)a6(5)
cisco nx-os Versi 6.0(2)a6(5a)
cisco nx-os Versi 6.0(2)a6(5b)
cisco nx-os Versi 6.0(2)a6(6)
cisco nx-os Versi 6.0(2)a6(7)
cisco nx-os Versi 6.0(2)a6(8)
cisco nx-os Versi 6.0(2)a7(1)
cisco nx-os Versi 6.0(2)a7(1a)
cisco nx-os Versi 6.0(2)a7(2)
cisco nx-os Versi 6.0(2)a7(2a)
cisco nx-os Versi 6.0(2)a8
cisco nx-os Versi 6.0(2)a8(1)
cisco nx-os Versi 6.0(2)a8(2)
cisco nx-os Versi 6.0(2)a8(3)
cisco nx-os Versi 6.0(2)a8(4)
cisco nx-os Versi 6.0(2)a8(4a)
cisco nx-os Versi 6.0(2)a8(5)
cisco nx-os Versi 6.0(2)a8(6)
cisco nx-os Versi 6.0(2)a8(6.213)
cisco nx-os Versi 6.0(2)a8(7)
cisco nx-os Versi 6.0(2)a8(7a)
cisco nx-os Versi 6.0(2)a8(7b)
cisco nx-os Versi 6.0(2)a8(8)
cisco nx-os Versi 6.0(2)a8(9)
cisco nx-os Versi 6.0(2)a8(9.7)
cisco nx-os Versi 6.0(2)a8(10)
cisco nx-os Versi 6.0(2)a8(10a)
cisco nx-os Versi 6.0(2)a8(11)
cisco nx-os Versi 6.0(2)a8(11a)
cisco nx-os Versi 6.0(2)a8(11b)
cisco nx-os Versi 6.0(2)u2(1)
cisco nx-os Versi 6.0(2)u2(2)
cisco nx-os Versi 6.0(2)u2(3)
cisco nx-os Versi 6.0(2)u2(4)
cisco nx-os Versi 6.0(2)u2(5)
cisco nx-os Versi 6.0(2)u2(6)
cisco nx-os Versi 6.0(2)u3(1)
cisco nx-os Versi 6.0(2)u3(2)
cisco nx-os Versi 6.0(2)u3(3)

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 290 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.