PT-2025-8730 · Cisco · Cisco Nexus 3000 Series Switches+2

Published

2025-02-26

·

Updated

2025-03-13

·

CVE-2025-20111

CVSS v3.1

7.4

High

VectorAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 Series Switches (affected versions not specified) Cisco Nexus 9000 Series Switches (affected versions not specified)
Description A denial of service condition can be caused by an unauthenticated, adjacent attacker due to the incorrect handling of specific Ethernet frames. The attacker could exploit this by sending a sustained rate of crafted Ethernet frames to an affected device, causing it to reload unexpectedly.
Recommendations For Cisco Nexus 3000 Series Switches, update to a version that correctly handles Ethernet frames to prevent unexpected reloads. For Cisco Nexus 9000 Series Switches, update to a version that correctly handles Ethernet frames to prevent unexpected reloads. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-02111
CVE-2025-20111

Affected Products

Cisco Nexus
Cisco Nexus 3000 Series Switches
Cisco Nexus 9000 Series Switches