A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload.
This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the unexpected restart of the IS-IS process, which could cause the affected device to reload. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2 adjacent to the affected device.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
22 Dec 2023, 14:59
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-23 19:15
Updated : 2024-02-05 00:01
NVD link : CVE-2023-20169
Mitre link : CVE-2023-20169
CVE.ORG link : CVE-2023-20169
JSON object : View
Products Affected
cisco
- nexus_36180yc-r
- nexus_9508
- nexus_92348gc-x
- nexus_9516
- nexus_3264c-e
- nexus_3264q
- nexus_31108tc-v
- nexus_3048
- nexus_9232e
- nexus_31128pq
- nexus_3132c-z
- nexus_3172pq-xl
- nexus_3548-xl
- nexus_3172tq
- nexus_34180yc
- nexus_3524-x
- nexus_3172tq-xl
- nexus_34200yc-sm
- nexus_3432d-s
- nexus_9504
- nexus_3164q
- nexus_3172pq
- nexus_3548
- nexus_9408
- nexus_3548-x
- nexus_3524
- nexus_3172tq-32t
- nexus_3408-s
- nexus_3464c
- nexus_3524-xl
- nexus_31108pc-v
- nx-os
- nexus_3232
- nexus_3132q-v
- nexus_3132q-xl