CVE-2020-7122 PUBLISHED CVSS 7.5 HIGH

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000.

EPSS 0.35% · 56.9th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.35%
56.9th percentile

Affected Products

VendorProductVersions
arubanetworkscx_6200f_firmware0
n/aAruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400Firmware 10.04.1000 and below
arubanetworkscx_6300_firmware0
arubanetworkscx_6400_firmware0
arubanetworkscx_8325_firmware0
arubanetworkscx_8320_firmware0
arubanetworkscx_8400_firmware0

Timeline

References

Open in Interactive Console →