CVE-2020-3517

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause process crashes, which could result in a denial of service (DoS) condition on an affected device. The attack vector is configuration dependent and could be remote or adjacent. For more information about the attack vector, see the Details section of this advisory. The vulnerability is due to insufficient error handling when the affected software parses Cisco Fabric Services messages. An attacker could exploit this vulnerability by sending malicious Cisco Fabric Services messages to an affected device. A successful exploit could allow the attacker to cause a reload of an affected device, which could result in a DoS condition.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Aug 27, 2020
Last modified
Jun 17, 2026
NVD status
Undergoing Analysis

Related CVEs from 2020

CVE-2020-351705.4Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMaxCVE-2020-351739.8The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server (aka services.CVE-2020-351755.3Frappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.CVE-2020-351765.3In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial absolute pathname (omitting the initial /etc), even though it was intenCVE-2020-351775.3HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.CVE-2020-35185.4A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remCVE-2020-351849.8The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployCVE-2020-351859.8The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docCVE-2020-351869.8The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container CVE-2020-351879.8The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraCVE-2020-351899.8The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong dockerCVE-2020-35198.1A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote atta
CVE-2020-3517: High severity, CVSS 8.6 | Vulnix