Report feedback

An unauthenticated remote attacker can trigger an unexpected restart of the netstack process when processing MPLS traffic, which allows them to send a spoofed IPv6 packet within MPLS to a target MPLS-enabled device and carry out a DoS attack [1].

The vulnerability is present in product:

• Cisco NX-OS Software; <9.3(12); >9.3(12), <10.2(6)

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

More information:

• CVE-2024-20267 at cve.org, NVD
• CWE-120 at cwe.mitre.org

The vulnerability was publicly disclosed 28. 2. 2024.

An unauthenticated remote attacker can send a large amount of network traffic, which may disrupt adjacent eBGP sessions and lead to a DoS condition in the network [2].

The vulnerability is present in product:

• Cisco NX-OS Software; <9.3(12); >9.3(12), <10.2(6); >10.2(6), <10.3(4a)

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

More information:

• CVE-2024-20321 at cve.org, NVD
• CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 28. 2. 2024.

An unauthenticated attacker on the local network can carry out a DoS attack by sending a crafted LLDP packet to an interface of the affected device [3].

The vulnerability is present in product:

• Cisco NX-OS Software; <9.3(12); >9.3(12), <10.2(6); >10.2(6), <10.3(4a)

CVSS: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H

More information:

• CVE-2024-20294 at cve.org, NVD
• CWE-805 at cwe.mitre.org

The vulnerability was publicly disclosed 28. 3. 2024.

An unauthenticated remote attacker can send traffic through an affected device that should be blocked. This allows access to network resources that should be protected by ACLs defined for port-channel subinterfaces [4].

The vulnerability is present in product:

• Cisco NX-OS Software; <9.3(12)

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

More information:

• CVE-2024-20291 at cve.org, NVD
• CWE-284 at cwe.mitre.org

The vulnerability was publicly disclosed 28. 2. 2024.