Skip to content
fr Sign in
4.7 Medium

CVE-2020-3174 A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker…

Description

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper validation of a received gratuitous ARP (GARP) request. An attacker could exploit this vulnerability by sending a malicious GARP packet on the local subnet to cause the ARP table on the device to become corrupted. A successful exploit could allow the attacker to populate the ARP table with incorrect entries, which could lead to traffic disruptions.

Affected products and versions

Product Affected versions Fixed in
Cisco NX-OS Software 7.3(2)D1(1d) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco NX-OS Software 7.3(2)D1(1d)

The 2 CVEs of Cisco NX-OS Software 7.3(2)D1(1d) →
CVE-2020-3170 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause… 5.3 Medium
Track this CVE