PT-2026-21946 · Cisco · Cisco Nx-Os+1

Publicado 2026-02-25 · Atualizado 2026-02-27 · CVE-2026-20010

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description A flaw exists in the Link Layer Discovery Protocol (LLDP) feature that could allow a nearby attacker to restart the LLDP process, potentially causing the device to reload unexpectedly. This is due to improper handling of specific fields within an LLDP frame. An attacker can exploit this by sending a specially crafted LLDP packet to an interface on the affected device, leading to a denial of service (DoS) condition. LLDP is a Layer 2 link protocol, requiring the attacker to be directly connected to the device, either physically or logically, to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-805

Identificadores relacionados

CVE-2026-20010

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 6

• https://twitter.com/infoflowcloud/status/2027100537410158914 · Publicação no Twitter
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-20010 · Nota de Segurança
• https://t.me/cveNotify/153486 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027099324690350221 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2026801482364805527 · Publicação no Twitter