CVE-2020-3232
Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vulnerability
- State
- Published
- Severity
- 6.3 Medium
- Published
- Jun 3, 2020
- Updated
- Nov 15, 2024
- Reserved
- Dec 12, 2019
Description
A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco ASR 920 Series Aggregation Services RouterCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.