Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-3118

71
FAUCET Score

CVE-2020-3118 is a critical vulnerability in the Cisco Discovery Protocol (CDP) implementation for Cisco IOS XR Software, affecting various Cisco devices. This flaw allows an unauthenticated, adjacent attacker to execute arbitrary code or cause a device reload due to improper validation of string input in CDP messages. With a CVSS score of 8.8 (HIGH), exploitation requires Layer 2 adjacency and can lead to full administrative compromise. This vulnerability has been actively exploited in the wild, as confirmed by its presence in the KEV catalog and NSA advisories, despite a lack of public exploit code on platforms like Metasploit or ExploitDB. The high FAUCET Risk Score of 98/100 and extensive community discussion (18 mentions) underscore its significant threat.

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.6.0, < 6.6.12CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
>= 7.0.0, < 7.0.2CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
6.5.3CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:6.5.3:*:*:*:*:*:*:*
5.2.5CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:5.2.5:*:*:*:*:*:*:*
6.4.2CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:6.4.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

8.8HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.0

Exploit Intelligence

EPSS Score
11.68%
Probability of exploitation in next 30 days
EPSS Percentile
95.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Added to KEV · Nov 3, 2021
This CVE's current EPSS score of 0.1168 is in the 97th percentile among its peer group of 1,859 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

ciscovendor investigatingvia nvd_reference
View patch

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
packetstormsecurity.com / files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html
Third Party AdvisoryVDB Entry
tools.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-iosxr-cdp-rce
Vendor Advisory