HIGH✓ PATCH🇬🇧 English

CVE-2023-20169

CVSS 7.4v3.1pub. 2023-08-23upd. 2024-11-21

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the unexpected restart of the IS-IS process, which could cause the affected device to reload. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2 adjacent to the affected device.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Nexus 3048

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 31108pc V

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 31108tc V

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 31128pq

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3132c Z

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3132q V

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3132q Xl

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3164q

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3172pq

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3172pq Xl

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3172tq

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3172tq 32t

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3172tq Xl

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3232

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3264c E

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3264q

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3408 S

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 34180yc

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 34200yc Sm

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3432d S

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3464c

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3524

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3524 X

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3524 Xl

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3548

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3548 X

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 3548 Xl

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 36180yc R

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 9232e

    HW
    Cisco
    wszystkie wersje

  • Cisco Nexus 92348gc X

    HW
    Cisco
    wszystkie wersje
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2021-1361CRITICAL9.8ten sam produkt

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switc...

CVE-2019-1804CRITICAL9.8ten sam produkt

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (...

CVE-2018-0310CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could a...

CVE-2018-0301CRITICAL9.8ten sam produkt

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker ...

CVE-2016-1453CRITICAL9.8ten sam produkt

Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Ne...