CVE-2020-3232
Estado: ModificadaAlta (7.7)—
A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Puntuación base: 7.7
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.03%
- Percentil entre todas las CVEs puntuadas: 63
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-19
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2020-3232",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2020-3232",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-11-15T16:28:03.731130Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
"authentication": "SINGLE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 6.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 1.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.7,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 4,
"exploitabilityScore": 3.1
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco ASR 920 Series Aggregation Services Router",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2020-06-03T18:15:21.183",
"references": [
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr920-ABjcLmef",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr920-ABjcLmef",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@cisco.com",
"description": [
{
"lang": "en",
"value": "CWE-19"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Simple Network Management Protocol (SNMP) implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is returned for Cisco Discovery Protocol queries to SNMP. An attacker could exploit this vulnerability by sending a request for Cisco Discovery Protocol information by using SNMP. An exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la implementación de Simple Network Management Protocol (SNMP) en Cisco ASR 920 Series Aggregation Services Router modelo ASR920-12SZ-IM, podría permitir a un atacante remoto autenticado causar que el dispositivo se vuelva a cargar. La vulnerabilidad es debido al manejo incorrecto de los datos que se devuelven para las consultas de Cisco Discovery Protocol a SNMP. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición de información del Protocolo de descubrimiento de Cisco mediante SNMP. Una explotación podría permitir al atacante causar que el dispositivo afectado se vuelva a cargar, resultando en una condición de denegación de servicio (DoS)."
}
],
"lastModified": "2026-06-17T03:17:43.337",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA0B441A-3A09-4A58-8A40-D463003A50BC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C35B3F96-B342-4AFC-A511-7A735B961ECD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "844E7CEC-5CB6-47AE-95F7-75693347C08E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27F66514-B9C4-422E-B68E-406608302E03"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABC524BA-544C-49B9-A9D6-800D25556532"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "876767C7-0196-4226-92B1-DDE851B53655"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0141D67B-632F-48ED-8837-4CC799616C57"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE444B39-D025-471B-835E-88671212ACAA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CCDB353-DD15-4C91-AD2A-73649C012E08"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "014224BF-926E-470C-A133-84036D8AD533"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4063CCF8-19BE-4411-B71B-147BB146700B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "186ADB50-A4D4-4B32-884D-3195E7770346"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "334F278A-CFEB-4145-9D8D-EFC36A1BF258"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE7B2557-821D-4E05-B5C3-67192573D97D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65020120-491D-46CD-8C73-974B6F4C11E6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FBD681F-7969-42BE-A47E-7C287755DCB5"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98255E6F-3056-487D-9157-403836EFB9D3"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96852D16-AF50-4C70-B125-D2349E6765D7"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A15B882A-BA60-4932-A55E-F4A798B30EEB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C9C585C-A6EC-4385-B915-046C110BF95F"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "119A964D-ABC8-424D-8097-85B832A833BD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0375BF9E-D04B-4E5B-9051-536806ECA44E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "012A6CF7-9104-4882-9C95-E6D4458AB778"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:asr_920-12sz-im:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2BD45D77-4097-4AFB-98DF-5B8188316C20"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}