PT-2023-4538 · Cisco · Cisco Nx-Os+1

Published 2023-08-23 · Updated 2024-01-25 · CVE-2023-20169

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode (affected versions not specified)

Description The issue is related to insufficient input validation when parsing an ingress IS-IS packet, which could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, leading to a denial of service (DoS) condition and potentially causing the affected device to reload. The IS-IS protocol is a routing protocol, and to exploit this vulnerability, an attacker must be Layer 2 adjacent to the affected device.

Recommendations For Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode, update to a version that includes the fix for this issue, as Cisco has released software updates that address this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability, however, it is known that Cisco has released software updates that address this vulnerability.

Fix

DoS

Access of Memory Location After End of Buffer

RCE

Weakness Enumeration

CWE-788

CWE-20

Related Identifiers

BDU:2023-04943

CVE-2023-20169

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20169 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04943 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20169 · Security Note
• https://t.me/cibsecurity/69082 · Telegram Post