Description
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Nexus Dashboard | 1.1(0c); 1.1(0d); 1.1(2h); 1.1(2i); 1.1(3c); 1.1(3d); 1.1(3e); 1.1(3f); 2.0(1b); 2.0(1d); 2.0(2g); 2.0(2h); 2.1(1d); 2.1(1e); 2.1(2d); 2.1(2f); 2.2(1e); 2.2(1h); 2.2(2d) |
References
Timeline
- Published
- Mar 1, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified