High severity · published Sep 23, 2020
CVE-2020-7122
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found
7.5
CVSS
1%
EPSS
No
On KEV
Description
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C6
CX 6200f Firmware · Arubanetworks
through 10.04.1000 · source: NVD
C6
CX 6300 Firmware · Arubanetworks
through 10.04.1000 · source: NVD
C6
CX 6400 Firmware · Arubanetworks
through 10.04.1000 · source: NVD
C8
CX 8320 Firmware · Arubanetworks
through 10.04.1000 · source: NVD
C8
CX 8325 Firmware · Arubanetworks
through 10.04.1000 · source: NVD
C8
CX 8400 Firmware · Arubanetworks
through 10.04.1000 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-7122
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-7122
Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt
More from CX 6200f Firmware
7.5
CVE-2020-7121
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found