What is CVE-2020-7122?

CVE-2020-7122 is a high-severity vulnerability in Arubanetworks Cx 6200f, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2020-09-23.

How severe is CVE-2020-7122?

High severity. CVSS v3 base score is 7.5 out of 10.

Buffer overflow in Arubanetworks Cx 6200f

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000.

Vulnerability class: Buffer Overflow

EPSS: 0.010 (59.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7122?: CVE-2020-7122 is a high-severity vulnerability in Arubanetworks Cx 6200f, classified under Out-of-bounds Write. CVSS score: 7.5/10. Published 2020-09-23.
How severe is CVE-2020-7122?: High severity. CVSS v3 base score is 7.5 out of 10.