7.7
CVSSv3

CVE-2020-3232

Published: 03/06/2020 Updated: 19/10/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.9 | Exploitability Score: 8
CVSS v3 Base Score: 7.7 | Impact Score: 4 | Exploitability Score: 3.1
VMScore: 605
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C

Vulnerability Summary

A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote malicious user to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the malicious user to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios_xe 3.16.0s

cisco ios_xe 3.16.1as

cisco ios_xe 3.16.2as

cisco ios_xe 3.16.3as

cisco ios_xe 3.16.4bs

cisco ios_xe 3.16.4s

cisco ios_xe 3.16.5as

cisco ios_xe 3.16.5s

cisco ios_xe 3.16.6bs

cisco ios_xe 3.16.6s

cisco ios_xe 3.16.7bs

cisco ios_xe 3.16.7s

cisco ios_xe 3.16.8s

cisco ios_xe 3.16.9s

cisco ios_xe 3.16.10s

cisco ios_xe 3.17.0s

cisco ios_xe 3.17.1s

cisco ios_xe 3.17.2s

cisco ios_xe 3.17.3s

cisco ios_xe 3.17.4s

cisco ios_xe 3.18.0s

cisco ios_xe 3.18.0sp

cisco ios_xe 3.18.1gsp

cisco ios_xe 3.18.1hsp

cisco ios_xe 3.18.1isp

cisco ios_xe 3.18.1s

cisco ios_xe 3.18.1sp

cisco ios_xe 3.18.2s

cisco ios_xe 3.18.2sp

cisco ios_xe 3.18.3s

cisco ios_xe 3.18.3sp

cisco ios_xe 3.18.4s

cisco ios_xe 3.18.4sp

cisco ios_xe 16.3.10

cisco ios_xe 16.5.1

cisco ios_xe 16.5.2

cisco ios_xe 16.5.3

cisco ios_xe 16.6.1

cisco ios_xe 16.6.2

cisco ios_xe 16.6.3

cisco ios_xe 16.6.4

cisco ios_xe 16.7.1

cisco ios_xe 16.7.2

cisco ios_xe 16.7.3

cisco ios_xe 16.8.1

cisco ios_xe 16.8.1a

cisco ios_xe 16.8.1b

cisco ios_xe 16.8.1c

cisco ios_xe 16.8.1d

cisco ios_xe 16.8.1e

cisco ios_xe 16.8.1s

cisco ios_xe 16.9.1

cisco ios_xe 16.9.1a

cisco ios_xe 16.9.1b

cisco ios_xe 16.9.1c

cisco ios_xe 16.9.1d

cisco ios_xe 16.9.1s

Vendor Advisories

A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP An ...