CVE-2020-3174

A vulnerability in the anycast gateway feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a device to learn invalid Address Resolution Protocol (ARP) entries. The ARP entries are for nonlocal IP addresses for the subnet. The vulnerability is due to improper validation of a received gratuitous ARP (GARP) request. An attacker could exploit this vulnerability by sending a malicious GARP packet on the local subnet to cause the ARP table on the device to become corrupted. A successful exploit could allow the attacker to populate the ARP table with incorrect entries, which could lead to traffic disruptions.

• CWE-345
• CWE-345

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-nxos-arpVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-nxos-arpVendor Advisory

Published

Feb 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3168A vulnerability in the Secure Login Enhancements capability …7.5
• CVE-2020-3169A vulnerability in the CLI of Cisco FXOS Software could allo…6.7
• CVE-2020-3170A vulnerability in the NX-API feature of Cisco NX-OS Softwar…5.3
• CVE-2020-3171A vulnerability in the local management (local-mgmt) CLI of …7.8
• CVE-2020-3172A vulnerability in the Cisco Discovery Protocol feature of C…8.8
• CVE-2020-3173A vulnerability in the local management (local-mgmt) CLI of …7.8
• CVE-2020-3175A vulnerability in the resource handling system of Cisco NX-…8.6
• CVE-2020-3176A vulnerability in Cisco Remote PHY Device Software could al…6.7
• CVE-2020-3177A vulnerability in the Tool for Auto-Registered Phones Suppo…7.5
• CVE-2020-3178Multiple vulnerabilities in the web-based GUI of Cisco Async…6.1
• CVE-2020-3179A vulnerability in the generic routing encapsulation (GRE) t…7.5
• CVE-2020-3180A vulnerability in Cisco SD-WAN Solution Software could allo…7.8