CVE-2020-3118 Cisco IOS XR
Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.
- CVSS
- not scored
On CISA’s exploited list
Cisco IOS XR Software Discovery Protocol Format String Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known