A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu | Vendor Advisory |
Configurations
History
25 Jan 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition. |
10 Mar 2023, 15:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cisco:nexus_dashboard:*:*:*:*:*:*:*:* | |
| CWE | CWE-400 | |
| References | (MISC) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndb-dnsdos-bYscZOsu - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
01 Mar 2023, 13:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-01 08:15
Updated : 2024-02-04 23:14
NVD link : CVE-2023-20014
Mitre link : CVE-2023-20014
CVE.ORG link : CVE-2023-20014
JSON object : View
Products Affected
cisco
- nexus_dashboard