PT-2024-1951 · Cisco · Cisco Nx-Os+1

Published

2024-02-28

·

Updated

2024-03-12

·

CVE-2024-20267

CVSS v3.1

8.6

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)
Description A vulnerability in the handling of MPLS traffic could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, resulting in a denial of service (DoS) condition. This is due to a lack of proper error checking when processing an ingress MPLS frame. An attacker could exploit this by sending a crafted IPv6 packet encapsulated within an MPLS frame to an MPLS-enabled interface of the targeted device. The DoS condition may occur when the NX-OS device processes the packet.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-01750
CVE-2024-20267

Affected Products

Cisco Nx-Os
Cisco Nexus