Description
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:LWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco NX-OS Software | 8.2(5); 7.3(5)D1(1); 8.4(2); 8.4(3); 9.2(3); 9.2(2v); 7.3(4)D1(1); 8.2(1); 9.2(1); 9.2(2t); 9.2(3y); 9.3(2); 8.1(1); 8.2(2); 8.3(2); 7.3(2)D1(3a); 9.2(4); 8.1(2); 7.3(3)D1(1); 8.2(3) |
References
Timeline
- Published
- Oct 7, 2026
- Last modified
- Oct 8, 2026
- NVD status
- Awaiting Analysis