CVE Watch—

CVE-2020-3118

Cisco IOS XR Software Discovery Protocol Format String Vulnerability

CVSS

—

Sem CVSS

EPSS

11.7%

p96

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

11.7%EPSS · 30 dias11.7%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Cisco / IOS XR

Vulnerabilidade

Cisco IOS XR Software Discovery Protocol Format String Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-3118

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2022-20821—

96.0%

KEV—79Cisco IOS XR Open Port Vulnerability—CVE-2010-3035—

93.0%

KEV—78Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—CVE-2020-3566—

89.8%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2020-3569—

88.6%

KEV—77Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability—CVE-2009-2055—

88.6%

KEV—77Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability—