CVE-2020-3175CWE-664

Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability

High · published February 26, 2020

CVSS v3.0
8.6
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01969 · 80.2th percentile
Weakness
CWE-664 · Improper Control of a Resource Through its Lifetime
Published
2020-02-26T16:50Z
EPSS history
Timeline
  • 26 FEB 16:50Z
    Cisco MDS 9000 Series Multilayer Switches Denial of Service Vulnerability
    cvelistv5