8.6

CVE-2024-20321

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

 This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version7.0(3)f1(1)
Cisco ≫ Nx-os Version7.0(3)f2(1)
Cisco ≫ Nx-os Version7.0(3)f2(2)
Cisco ≫ Nx-os Version7.0(3)f3(1)
Cisco ≫ Nx-os Version7.0(3)f3(2)
Cisco ≫ Nx-os Version7.0(3)f3(3)
Cisco ≫ Nx-os Version7.0(3)f3(3a)
Cisco ≫ Nx-os Version7.0(3)f3(3c)
Cisco ≫ Nx-os Version7.0(3)f3(4)
Cisco ≫ Nx-os Version7.0(3)f3(5)
Cisco ≫ Nx-os Version9.2(1)
Cisco ≫ Nx-os Version9.2(2)
Cisco ≫ Nx-os Version9.2(2t)
Cisco ≫ Nx-os Version9.2(2v)
Cisco ≫ Nx-os Version9.2(3)
Cisco ≫ Nx-os Version9.2(4)
Cisco ≫ Nx-os Version9.3(1)
Cisco ≫ Nx-os Version9.3(2)
Cisco ≫ Nx-os Version9.3(3)
Cisco ≫ Nx-os Version9.3(4)
Cisco ≫ Nx-os Version9.3(5)
Cisco ≫ Nx-os Version9.3(6)
Cisco ≫ Nx-os Version9.3(7)
Cisco ≫ Nx-os Version9.3(7a)
Cisco ≫ Nx-os Version9.3(8)
Cisco ≫ Nx-os Version9.3(9)
Cisco ≫ Nx-os Version9.3(10)
Cisco ≫ Nx-os Version9.3(11)
Cisco ≫ Nx-os Version9.3(12)
Cisco ≫ Nx-os Version10.1(1)
Cisco ≫ Nx-os Version10.1(2)
Cisco ≫ Nx-os Version10.1(2t)
Cisco ≫ Nx-os Version10.2(1)
Cisco ≫ Nx-os Version10.2(1q)
Cisco ≫ Nx-os Version10.2(2)
Cisco ≫ Nx-os Version10.2(3)
Cisco ≫ Nx-os Version10.2(3t)
Cisco ≫ Nx-os Version10.2(3v)
Cisco ≫ Nx-os Version10.2(4)
Cisco ≫ Nx-os Version10.2(5)
Cisco ≫ Nx-os Version10.2(6)
Cisco ≫ Nx-os Version10.3(1)
Cisco ≫ Nx-os Version10.3(2)
Cisco ≫ Nx-os Version10.3(3)
Cisco ≫ Nx-os Version10.3(4a)
Cisco ≫ Nx-os Version10.3(99w)
Cisco ≫ Nx-os Version10.3(99x)
Cisco ≫ Nx-os Version10.4(1)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.71% 0.486
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
psirt@cisco.com 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ebgp-dos-L3QCwVJ
Vendor Advisory