CVE-2020-3119

Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability

HIGH

8.8

CVSS Score

Published: February 5, 2020 at 05:45 PM UTC

Updated: June 17, 2026 at 03:17 AM UTC

84 products affected across 1 vendorNx OSUcs ManagerNexus 9508

Using Cisco Unified Computing System (Managed) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Unified Computing System (Managed) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 5%

SSVC

No known exploit

Description

A vulnerability in the Cisco Discovery Protocol implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability exists because the Cisco Discovery Protocol parser does not properly validate input for certain fields in a Cisco Discovery Protocol message. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. An successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

v < 9.3(2)14.0 ≤ v < 14.2(1j)7.0(3)f2 ≤ v < 9.3(2)7.0(3)i ≤ v < 7.0(3)i7(8)7.1 ≤ v < 7.3(6)n1(1)

Affected range stops below 14.2(1j), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i7(8), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3(6)n1(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.3(2), so it looks safe — our inference, not a vendor statement

cisco-nexus-3016 (environment) · cisco-nexus-3048 (environment) · cisco-nexus-3064 (environment) · cisco-nexus-3064-t (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172 (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq (environment) · cisco-nexus-3172tq-32t (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548 (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-5548p (environment) · cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5696q (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment)

Ucs Manager · Cisco

95%

v < 3.2(3m)4.0 ≤ v < 4.0(4f)

Affected range stops below 3.2(3m), so it looks safe — our inference, not a vendor statement

Affected range stops below 4.0(4f), so it looks safe — our inference, not a vendor statement

cisco-ucs-6248up (environment) · cisco-ucs-6296up (environment) · cisco-ucs-6300 (environment) · cisco-ucs-6324 (environment) · cisco-ucs-64108 (environment) · cisco-ucs-6454 (environment)

Unified Computing System · Cisco

60%

v < 9.3(2)

Affected range stops below 9.3(2), so it looks safe — our inference, not a vendor statement

Nexus 3016 · Ciscodevice

80%

All versions

Nexus 3048 · Ciscodevice

80%

All versions

Nexus 3064 · Ciscodevice

80%