7.5

CVE-2020-7121

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.3021.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ Cx 6200f Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 6200f Version -
Arubanetworks ≫ Cx 6300 Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 6300 Version -
Arubanetworks ≫ Cx 6400 Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 6400 Version -
Arubanetworks ≫ Cx 8320 Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 8320 Version -
Arubanetworks ≫ Cx 8325 Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 8325 Version -
Arubanetworks ≫ Cx 8400 Firmware Version <= 10.04.3021
   Arubanetworks ≫ Cx 8400 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.58
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-009.txt
Vendor Advisory