CVE-2020-3110 – This vulnerability in Cisco Video Surveillance ... (How to Fix)

Q: What is the severity of CVE-2020-3110?

CVE-2020-3110 has a CVSS score of 8.8 (HIGH). This vulnerability in Cisco Video Surveillance 8000 Series IP Cameras allows an attacker on the same network segment to execute arbitrary code or cause a denial of service by sending malicious Cisco Discovery Protocol packets. It affects devices running firmware versions before 1.0.7. Attackers must be Layer 2 adjacent to the target device.

📋 TL;DR

This vulnerability in Cisco Video Surveillance 8000 Series IP Cameras allows an attacker on the same network segment to execute arbitrary code or cause a denial of service by sending malicious Cisco Discovery Protocol packets. It affects devices running firmware versions before 1.0.7. Attackers must be Layer 2 adjacent to the target device.

💻 Affected Systems

Products:

Cisco Video Surveillance 8000 Series IP Cameras

Versions: All versions before 1.0.7

Operating Systems: Embedded camera firmware

Default Config Vulnerable: ⚠️ Yes

Notes: Cisco Discovery Protocol is typically enabled by default on Cisco devices.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete device compromise, camera manipulation, network pivoting, and persistent access.

🟠

Likely Case

Denial of service causing camera reboot and temporary surveillance interruption.

🟢

If Mitigated

Limited to denial of service if network segmentation prevents code execution payloads.

🌐 Internet-Facing: LOW - Requires Layer 2 adjacency, cannot be exploited over the internet.

🏢 Internal Only: HIGH - Attackers on the same network segment can exploit without authentication.

🎯 Exploit Status

Public PoC: ⚠️ Yes

Weaponized: CONFIRMED

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Exploit code is publicly available and requires only network access to the same broadcast domain.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Firmware Release 1.0.7 and later

Vendor Advisory: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-ipcameras-rce-dos

Restart Required: Yes

Instructions:

1. Download firmware 1.0.7+ from Cisco support portal. 2. Upload firmware to camera via web interface or CLI. 3. Reboot camera to apply update.

🔧 Temporary Workarounds

Disable Cisco Discovery Protocol

all

Disable CDP on affected cameras to prevent exploitation.

no cdp enable

Network Segmentation

all

Isolate cameras on separate VLANs to limit broadcast domain exposure.

🧯 If You Can't Patch

Implement strict network segmentation to isolate cameras from untrusted devices
Deploy network monitoring to detect malicious CDP traffic

🔍 How to Verify

Check if Vulnerable:

Check firmware version via camera web interface or CLI: show version

Check Version:

show version

Verify Fix Applied:

Confirm firmware version is 1.0.7 or higher and CDP is disabled if using workaround

📡 Detection & Monitoring

Log Indicators:

Unexpected camera reboots
CDP protocol errors in system logs

Network Indicators:

Malformed CDP packets on camera network segments
Unusual CDP traffic patterns

SIEM Query:

source="camera_logs" AND (event="reboot" OR event="cdp_error")

📊 Metadata

CVE ID: CVE-2020-3110

CVSS v3 Score: 8.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-20

Published: February 5, 2020

Last Updated: November 21, 2024

🔗 References

http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html Third Party Advisory,VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-ipcameras-rce-dos Vendor Advisory
http://packetstormsecurity.com/files/156203/Cisco-Discovery-Protocol-CDP-Remote-Device-Takeover.html Third Party Advisory,VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200205-ipcameras-rce-dos Vendor Advisory

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2020-3110, you might also want to check these:

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Video Surveillance 8000p Ip Camera Firmware by Cisco

Video Surveillance 8020 Ip Camera Firmware by Cisco

Video Surveillance 8030 Ip Camera Firmware by Cisco

Video Surveillance 8030 Ip Camera Firmware by Cisco

Video Surveillance 8070 Ip Camera Firmware by Cisco

Video Surveillance 8400 Ip Camera Firmware by Cisco

Video Surveillance 8400 Ip Camera Firmware by Cisco

Video Surveillance 8400 Ip Camera Firmware by Cisco

Video Surveillance 8620 Ip Camera Firmware by Cisco

Video Surveillance 8630 Ip Camera Firmware by Cisco

Video Surveillance 8930 Speed Dome Ip Camera Firmware by Cisco

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable Cisco Discovery Protocol

Network Segmentation

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities