Vulnerabilityhigh
CDPwn vulnerabilities open millions of Cisco enterprise devices to attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-3110 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent… | 8.8 | 6% | ||
| CVE-2020-3111 | A vulnerability in the Cisco Discovery Protocol implementation for the Cisco IP Phone could allow an unauthenticated, adjacent attacker to remotely execute… | 8.8 | 3% | ||
| CVE-2020-3118 | Format String Vulnerability in Cisco IOS XR Discovery Protocol Allows Adjacent RCE | 8.8 | 12% | KEV | KEV |
| CVE-2020-3119 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary… | 8.8 | 5% | ||
| CVE-2020-3120 | A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an… | 6.5 | 2% |
From the original article
3 min read at helpnetsecurity.com
If you have Cisco equipment in your enterprise network – and chances are good that you have – you should check immediately which feature the newly revealed CDPwn vulnerabilities in Cisco’ proprietary device discovery protocol and implement patches as soon as possible.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.