جزئیات آسیب‌پذیری

CVE-2026-20033

Cisco NX-OS System Software in ACI Mode

Cisco NX-OS Software Denial of Service Vulnerability

CVSS 3.1
7.4بالا

شرح رسمی (انگلیسی)

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only the out-of-band (OOB) management interface is affected.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.4بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco NX-OS System Software in ACI Mode 15.2(1g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(2e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(2h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(3e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(3f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(4d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(4e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(4f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(5c) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(5d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(5e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(6e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(6g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(6h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(7f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(7g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.2(8i) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(1d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2a) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2b) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2c) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 15.3(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(1g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(1j) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(2h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(2j) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(3d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(3e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(4c) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(5h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(5j) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(6c) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(6h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(7e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(8e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(8f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(8h) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(9c) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(9d) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.0(9e) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(1f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(3f) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco NX-OS System Software in ACI Mode 16.1(4h) CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۱۲/۰۶
آخرین به‌روزرسانی
۱۴۰۴/۱۲/۰۶
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۰٫۱۷٪
احتمال بهره‌برداری در ۳۰ روز
۶٫۷٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-805
    Buffer Access with Incorrect Length Value