CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20169

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the unexpected restart of the IS-IS process, which could cause the affected device to reload. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2 adjacent to the affected device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 21.1%

CVSS Severity

CVSS v3 Score 7.4

References

Products affected by CVE-2023-20169

Cisco » Nexus 3048 » Version: N/A

cpe:2.3:h:cisco:nexus_3048:-
Cisco » Nexus 31108pc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108pc-v:-
Cisco » Nexus 31108tc-V » Version: N/A

cpe:2.3:h:cisco:nexus_31108tc-v:-
Cisco » Nexus 31128pq » Version: N/A

cpe:2.3:h:cisco:nexus_31128pq:-
Cisco » Nexus 3132c-Z » Version: N/A

cpe:2.3:h:cisco:nexus_3132c-z:-
Cisco » Nexus 3132q-V » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-v:-
Cisco » Nexus 3132q-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3132q-xl:-
Cisco » Nexus 3164q » Version: N/A

cpe:2.3:h:cisco:nexus_3164q:-
Cisco » Nexus 3172pq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172pq-xl:-
Cisco » Nexus 3172pq » Version: N/A

cpe:2.3:h:cisco:nexus_3172pq:-
Cisco » Nexus 3172tq-32t » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq-32t:-
Cisco » Nexus 3172tq-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq-xl:-
Cisco » Nexus 3172tq » Version: N/A

cpe:2.3:h:cisco:nexus_3172tq:-
Cisco » Nexus 3232 » Version: N/A

cpe:2.3:h:cisco:nexus_3232:-
Cisco » Nexus 3264c-E » Version: N/A

cpe:2.3:h:cisco:nexus_3264c-e:-
Cisco » Nexus 3264q » Version: N/A

cpe:2.3:h:cisco:nexus_3264q:-
Cisco » Nexus 3408-S » Version: N/A

cpe:2.3:h:cisco:nexus_3408-s:-
Cisco » Nexus 34180yc » Version: N/A

cpe:2.3:h:cisco:nexus_34180yc:-
Cisco » Nexus 34200yc-Sm » Version: N/A

cpe:2.3:h:cisco:nexus_34200yc-sm:-
Cisco » Nexus 3432d-S » Version: N/A

cpe:2.3:h:cisco:nexus_3432d-s:-
Cisco » Nexus 3464c » Version: N/A

cpe:2.3:h:cisco:nexus_3464c:-
Cisco » Nexus 3524-X » Version: N/A

cpe:2.3:h:cisco:nexus_3524-x:-
Cisco » Nexus 3524-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3524-xl:-
Cisco » Nexus 3524 » Version: N/A

cpe:2.3:h:cisco:nexus_3524:-
Cisco » Nexus 3548-X » Version: N/A

cpe:2.3:h:cisco:nexus_3548-x:-
Cisco » Nexus 3548-Xl » Version: N/A

cpe:2.3:h:cisco:nexus_3548-xl:-
Cisco » Nexus 3548 » Version: N/A

cpe:2.3:h:cisco:nexus_3548:-
Cisco » Nexus 36180yc-R » Version: N/A

cpe:2.3:h:cisco:nexus_36180yc-r:-
Cisco » Nexus 9232e » Version: N/A

cpe:2.3:h:cisco:nexus_9232e:-
Cisco » Nexus 92348gc-X » Version: N/A

cpe:2.3:h:cisco:nexus_92348gc-x:-
Cisco » Nexus 9408 » Version: N/A

cpe:2.3:h:cisco:nexus_9408:-
Cisco » Nexus 9504 » Version: N/A

cpe:2.3:h:cisco:nexus_9504:-
Cisco » Nexus 9508 » Version: N/A

cpe:2.3:h:cisco:nexus_9508:-
Cisco » Nexus 9516 » Version: N/A

cpe:2.3:h:cisco:nexus_9516:-
Cisco » Nx-Os » Version: 10.3(2)

cpe:2.3:o:cisco:nx-os:10.3(2)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-20169

Products

Pricing

Contact Us