جزئیات آسیبپذیری
CVE-2025-20241
Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability
شرح رسمی (انگلیسی)
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.4بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco NX-OS Software | 10.1(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.1(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.1(2t) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(1q) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(2a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(3t) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(3v) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(7) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.2(8) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3o) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3p) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3q) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3r) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3w) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(3x) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(4a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(4g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(4h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(99w) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.3(99x) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.4(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.4(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.4(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.4(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.4(4g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.5(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 10.5(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(10) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(10a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(11b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(4a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(7b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(8) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 6.0(2)A8(9) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(3c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)F3(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(1t) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(6t) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(7) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(8z) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I4(9) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I5(3b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I6(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I6(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(10) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(3z) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(5a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(6z) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(7) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(8) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(9) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)I7(9w) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)IA7(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)IA7(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)IC4(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 7.0(3)IM7(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(2t) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(2v) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(3y) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.2(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(1) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(10) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(11) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(12) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(13) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(14) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(1z) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(2) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(3) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(4) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(5) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(5w) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(6) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(7) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(7a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(7k) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(8) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco NX-OS Software | 9.3(9) | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۶/۰۵
- آخرین بهروزرسانی
- ۱۴۰۴/۰۶/۰۵
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- جزئی
ضعفها (CWE)
- CWE-733Compiler Optimization Removal or Modification of Security-critical Code