CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-05
Cisco IOS XR Cisco Discovery Protocol (CDP) Remote Code Execution and Stack Overflow Vulnerability (CVE-2020-3118)
[Affected Scope] Cisco network devices running Cisco IOS XR Software with Cisco Discovery Protocol (CDP) enabled
[Impact] An unauthenticated, adjacent attacker in the same Layer 2 broadcast domain can execute arbitrary code with administrative privileges or cause a denial of service (device reload)
[Mitigation] Apply official Cisco software patches immediately, or disable CDP globally/on untrusted interfaces as a temporary workaround