VulnerabilityModified
CVE-2020-7121
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found.
HIGH 7.5EPSS 0.99%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.99%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.3021.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.99% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- arubanetworks/cx 6200f firmware · arubanetworks/cx 6300 firmware · arubanetworks/cx 6400 firmware · arubanetworks/cx 8320 firmware · arubanetworks/cx 8325 firmware · arubanetworks/cx 8400 firmware
- Source
- security-alert@hpe.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.