CVEvulnerability
CVE-2020-3174
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-02-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 3.0 ([email protected])
- 4.7 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-345
Description
A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper validation of a received gratuitous ARP (GARP) request. An attacker could exploit this vulnerability by sending a malicious GARP packet on the local subnet to cause the ARP table on the device to become corrupted. A successful exploit could allow the attacker to populate the ARP table with incorrect entries, which could lead to traffic disruptions.
Affected configurations
• cisco nx-os 8.1\(1\)
• cisco nx-os 8.4\(1\)
• cisco nx-os 9.3\(1\)
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness