🛡️ CVE-2023-20200
🟠 CVSS 7.7 — High ✅ No Known Exploit CWE-835 NVD
7.7
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Interconnects could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the improper handling of specific SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: This vulnerability affects all supported SNMP versions. To exploit this vulnerability through SNMPv2c or earlier, an attacker must know the SNMP community string that is configured on an affected device. To exploit this vulnerability through SNMPv3, the attacker must have valid credentials for an SNMP user who is configured on the affected device.

Details

Severity HIGH
CVSS Score 7.7
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CWE CWE-835
Public Exploit ✅ No
Source NVD
Published 2023-08-23
Updated 2026-06-08
Modified 2024-11-21
Fix URL N/A

Affected Packages

Software From version Fixed in
firepower-4112-firmware
firepower-4115
firepower-4125-firmware
firepower-4143-firmware
firepower-9300-firmware
ucs-6324-fabric-interconnect-firmware 4.2 4.2\(3d\)
ucs-6332-16up-fabric-interconnect-firmware 4.2 4.2\(3b\)
ucs-6332-fabric-interconnect-firmware 4.2 4.2\(3b\)

Similar Threats

Site Security Check

Concerned your site may already be targeted?

BotEraser analyzes incoming traffic patterns and helps identify bot behavior consistent with known exploit attempts.

Check My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.