CVE-2020-3119— Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability
Quick assessment
Affected
Cisco Cisco Unified Computing System (Managed)
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco NX-OS Software是美国思科（Cisco）公司的一套交换机使用的数据中心级操作系统软件。 Cisco NX-OS Software中Cisco Discovery Protocol的实现存在缓冲区错误漏洞，该漏洞源于程序没有正确地验证输入。攻击者可通过发送恶意的Cisco Discovery Protocol数据包利用该漏洞执行任意代码或重新加载受影响的设备。
Possible ATT&CK Techniques 2 AI
T1046 · Network Service Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-3119
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability exists because the Cisco Discovery Protocol parser does not properly validate input for certain fields in a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. An successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco NX-OS Software 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco NX-OS Software是美国思科（Cisco）公司的一套交换机使用的数据中心级操作系统软件。 Cisco NX-OS Software中Cisco Discovery Protocol的实现存在缓冲区错误漏洞，该漏洞源于程序没有正确地验证输入。攻击者可通过发送恶意的Cisco Discovery Protocol数据包利用该漏洞执行任意代码或重新加载受影响的设备。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Unified Computing System (Managed) | unspecified ~ 9.3(2) | - |
|
II. Public POCs for CVE-2020-3119
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3119
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-3119 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-nxos-cdp-rce vendor-advisory x_refsource_CISCO
Exploits & Public PoCs for CVE-2020-3119 (1)
Same Patch Batch · Cisco · 2020-02-05 · 8 CVEs total
| CVE-2020-3123 | 7.5 HIGH | Clam AntiVirus 缓冲区错误漏洞 |
| CVE-2019-15253 | Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability | |
| CVE-2020-3110 | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu | |
| CVE-2020-3111 | Cisco IP Phone Remote Code Execution and Denial of Service Vulnerability | |
| CVE-2020-3118 | Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability | |
| CVE-2020-3149 | Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability | |
| CVE-2020-3120 | Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerab |
IV. Related Vulnerabilities
Same product: Cisco Unified Computing System (Managed)
-
CVE-2026-20037
Cisco UCS Manager File Write Vulnerability -
CVE-2026-20036
Cisco UCS Manager Software Command Injection Vulnerability -
CVE-2025-20295
Cisco UCS Manager Software Command Injection Vulnerability -
CVE-2025-20294
Cisco UCS Manager Software Command Injection Vulnerability -
CVE-2025-20342
Cisco Integrated Management Controller Virtual Keyboard Vide
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-787
-
CVE-2026-102514
Out-of-bounds write in PeaZip PEA extractor allows code exec -
CVE-2026-103484
pgvector buffer overflow in IVFFlat index build -
CVE-2026-59685
Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk -
CVE-2026-56449
Apache HTTP Server: mod_proxy_html: crash in dump_content -
CVE-2026-56153
Apache HTTP Server: mod_charset_lite: Heap overflow in finis
V. Comments for CVE-2020-3119
No comments yet