Vulnerability in Cisco Asr 920-12sz-Im
CVE-2020-3232
A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.010 (62.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 62nd percentile — 62.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: 0.000
Affected products
- Cisco Asr 920-12sz-Im
- Cisco Asr 920 Series Aggregation Services Router
- Cisco iOS Xe — versions 3.16.0s, 3.16.1as, 3.16.2as
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr920-A… (vendor-advisory, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3232?
- CVE-2020-3232 is a high-severity vulnerability in Cisco Asr 920-12sz-Im, classified under CWE-19. CVSS score: 7.7/10. Published 2020-06-03.
- How severe is CVE-2020-3232?
- High severity. CVSS v3 base score is 7.7 out of 10.