CVE-2020-7122 Memory corruption in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400
Local attackers can cause a denial of service in the CDP process on Aruba CX switches via memory corruption vulnerabilities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7122?
CVE-2020-7122 is a high-severity memory corruption vulnerability in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400, published on 23 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP (Cisco Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.1000.
Weakness: CWE-787
Which versions are affected by CVE-2020-7122?
It affects 6 products.
Products include Arubanetworks Cx 6200f Firmware, Arubanetworks Cx 6300 Firmware, Arubanetworks Cx 6400 Firmware, Arubanetworks Cx 8320 Firmware, Arubanetworks Cx 8325 Firmware, Arubanetworks Cx 8400 Firmware.
How do I fix CVE-2020-7122?
No fix has been published for CVE-2020-7122 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-7122 being exploited?
There is no known exploitation of CVE-2020-7122 in the wild and no public exploit code.
Other vulnerabilities in Aruba CX Switch Series 6200F, 6300, 6400, 8320, 8325, and 8400
Sources
Also known as GHSA-3rq8-wwm3-3pv9.