Denial of Service Vulnerability in Cisco FXOS and UCS 6300 Series
CVE-2023-20200

7.7HIGH

Key Information:

Vendor

Cisco
Status
Cisco Unified Computing System (managed)
Cisco Firepower Extensible Operating System (fxos)
Vendor
CVE Published:
23 August 2023

Badges

👾 Exploit Exists

What is CVE-2023-20200?

A vulnerability exists in the Simple Network Management Protocol (SNMP) service of certain Cisco devices, allowing an authenticated, remote attacker to induce a denial of service condition. This flaw arises from the improper handling of crafted SNMP requests, potentially leading to device reloads. Exploiting this vulnerability requires knowledge of the SNMP community string on SNMPv2c or earlier, or valid SNMP user credentials on SNMPv3.

Affected Version(s)

Cisco Firepower Extensible Operating System (FXOS) 2.2.1.63

Cisco Firepower Extensible Operating System (FXOS) 2.2.1.66

Cisco Firepower Extensible Operating System (FXOS) 2.2.1.70

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.