A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Connections 38
has cited scope1 retained · stored CVE-2020-3118 → Cisco · Cisco IOS XR Software375bbd3e-e5e8-473f-afca-cc38db06c62d
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_55082769a470-f2d8-40b3-9542-5c2bd8ead246
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_9922c14c35da-f98a-457a-987b-40d0a0b01717d4da847c-2c9d-4a80-a94a-bb28f0df23bf
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_550290ea2dca-05e6-4c20-90ab-93bb0c7c35cb
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_990604c4f463-5521-4443-99e6-e58e8a1e8521dd9fd778-414e-434d-ab73-bcd60a9755b0
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · xrv_90008c5e58df-4e07-4240-80aa-5046a9c14920
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_991040a83caf-ae04-44ff-a3e9-35264f0719b28dffb4b0-7499-49ea-b2b0-534df6dddfe6
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540x-12z16g-sys-d68a6b8d7-239e-49b3-867a-2505f10ba262
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540l0c10295b-6d2a-4a1a-82f9-eec7e5b169b6
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_551601f2868f-f017-4118-8aed-2421df0356b4
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540x-acc-sys8cb7e1db-07ea-4f6c-9bcd-88431e0824bc
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_9901668419ce-7e2d-4571-a19e-7cfad708755aa7f7b067-a70d-4820-b1a5-5718b6fe5550
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-28z4c-sys-dd79a0b4a-b0a2-4450-9610-2032dbcdfc57
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_6008aae88f34-12db-4e9b-bc86-a2af63185deb
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · crs-xcc2a80bb-6404-43be-8c6a-94b90f1366bd
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_600050429060-7a02-4289-b98a-e4af6b67cd3d
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540x-16z4g8q2c-a481a9ce7-b3f6-48b6-8d80-726f44fd1580
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-acc-sysabe67e1c-10bd-4253-ab0f-f2371af12587
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-12z20g-sys-a5aa35278-4cc6-4c4f-bc0a-1fd17c2ba44e
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_5501b3a2ffb3-9551-4cc7-ad2d-500b6cfedf6e
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · asr_90006e840b70-6c2c-46c0-bdb5-2e9acae5260d
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · asr_99200c87c071-c858-4c37-827d-3bb21fcdfc1c
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_99043093a89d-1f1c-442d-b08c-120cea15909f564dbeee-f661-46a3-a9ac-67e31a4cb0ad
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-12z20g-sys-dfb816f66-353e-4c83-8130-29757ad2de5e
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_9001b05fc3c6-70f6-42ea-9189-05af30329962c51895fb-13da-4cb3-9768-f06ea78514d8
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540x-16z4g8q2c-d55d0dad7-33cc-4f1c-a7ca-a1dc4e1d18c5
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_90105ea1a4c1-8f5f-4e69-a676-c682d991115e8e9efe15-21bc-4da1-9800-b3117dd0ee94
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-24z8q2c-sysc8d041fc-4d47-4b65-95c3-d2de626ef9d7
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · asr_990331c76dd5-6dc1-44ae-97aa-daffbb041d6f
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_90068304c2f7-b54e-42d3-b4bc-cc568098a173c46540ba-b39a-4886-8369-bb170174c634
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_9000v51fb5abb-c2c9-402e-9630-ffaa771a1783c214ceab-55c1-4df7-8e8e-62ba1d2422a3
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_5502-sede3fff37-bcbc-4068-8db7-b6a4b7e87ef8
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540-28z4c-sys-a8326d003-344a-4d86-8073-13e0e4dbf5b4
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_5501-sef4c095af-aa73-45e4-8bbe-21770c6dabc8
has environmental constraint2 retained · stored CVE-2020-3118 → cisco · asr_9912719d5347-4124-4f13-afe1-7a50998b2f80eef45053-768f-4067-8fc4-cdbab736b75c
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_5608b38cf0c-643e-45ab-b276-9fdedc26ada5
has environmental constraint1 retained · stored CVE-2020-3118 → cisco · ncs_540x-12z16g-sys-a8735c822-99d1-48f4-99af-766c3b809ee4
has vulnerable target scope7 retained · stored CVE-2020-3118 → cisco · ios_xr194dc6ad-90be-498b-b9d0-bb45667df2371c818bd9-7041-4757-ae75-9719bf215c543c861cf3-4faf-4556-b278-fdc9e55796efa357037c-8dd7-4431-a162-acdc69da8552c32f5fa0-3ffa-4fe8-8e4e-71e2e8e0d01dc95882d4-148e-40c1-afa2-2eb20ecd7391