CVE-2020-7121
High
Description
Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP (Link Layer Discovery Protocol) process in the switch. This applies to firmware versions prior to 10.04.3021.
SeverityHigh
CVSS7.5
Exploit probability—
ProductArubanetworks Cx 6200f Firmware
PublishedSep 23, 2020
First seenSep 23, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks cx_6200f_firmware | v ≤ 10.04.3021 | — |
| arubanetworks cx_6300_firmware | v ≤ 10.04.3021 | — |
| arubanetworks cx_6400_firmware | v ≤ 10.04.3021 | — |
| arubanetworks cx_8320_firmware | v ≤ 10.04.3021 | — |
| arubanetworks cx_8325_firmware | v ≤ 10.04.3021 | — |
| arubanetworks cx_8400_firmware | v ≤ 10.04.3021 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.