CVE-2020-7121 Memory corruption in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400
Memory corruption in Aruba CX switches allows local attackers to cause a denial of service in the LLDP process.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7121?
CVE-2020-7121 is a high-severity memory corruption vulnerability in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400, published on 23 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.3021.
Weakness: CWE-787
Which versions are affected by CVE-2020-7121?
It affects 6 products.
Products include Arubanetworks Cx 6200f Firmware, Arubanetworks Cx 6300 Firmware, Arubanetworks Cx 6400 Firmware, Arubanetworks Cx 8320 Firmware, Arubanetworks Cx 8325 Firmware, Arubanetworks Cx 8400 Firmware.
How do I fix CVE-2020-7121?
No fix has been published for CVE-2020-7121 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-7121 being exploited?
There is no known exploitation of CVE-2020-7121 in the wild and no public exploit code.
Other vulnerabilities in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400
Sources
Also known as GHSA-4h59-37x5-fm3w.