CVE-2023-20168 — Cisco / Cisco NX-OS Software

Description (CNA)

A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation when processing an authentication attempt if the directed request option is enabled for TACACS+ or RADIUS. An attacker could exploit this vulnerability by entering a crafted string at the login prompt of an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a denial of service (DoS) condition.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco NX-OS Software	affected 4.2(1)SV1(4); affected 4.2(1)SV1(4a); affected 4.2(1)SV1(4b); affected 4.2(1)SV1(5.1); affected 4.2(1)SV1(5.1a); affected 4.2(1)SV1(5.2); affected 4.2(1)SV1(5.2b); affected 4.2(1)SV2(1.1); affected 4.2(1)SV2(1.1a); affected 4.2(1)SV2(2.1); affected 4.2(1)SV2(2.1a); affected 4.2(1)SV2(2.2); affected 4.2(1)SV2(2.3); affected 5.2(1)SM1(5.1); affected 5.2(1)SM1(5.2); affected 5.2(1)SM1(5.2a); affected 5.2(1)SM1(5.2b); affected 5.2(1)SM1(5.2c); affected 5.2(1)SM3(1.1); affected 5.2(1)SM3(1.1a); affected 5.2(1)SM3(1.1b); affected 5.2(1)SM3(1.1c); affected 5.2(1)SM3(2.1); affected 5.2(1)SV3(1.4); affected 5.2(1)SV3(1.1); affected 5.2(1)SV3(1.3); affected 5.2(1)SV3(1.5a); affected 5.2(1)SV3(1.5b); affected 5.2(1)SV3(1.6); affected 5.2(1)SV3(1.10); affected 5.2(1)SV3(1.15); affected 5.2(1)SV3(2.1); affected 5.2(1)SV3(2.5); affected 5.2(1)SV3(2.8); affected 5.2(1)SV3(3.1); affected 5.2(1)SV3(1.2); affected 5.2(1)SV3(1.4b); affected 5.2(1)SV3(3.15); affected 5.2(1)SV3(4.1); affected 5.2(1)SV3(4.1a); affected 5.2(1)SV3(4.1b); affected 5.2(1)SV3(4.1c); affected 6.0(2)A3(1); affected 6.0(2)A3(2); affected 6.0(2)A3(4); affected 6.0(2)A4(1); affected 6.0(2)A4(2); affected 6.0(2)A4(3); affected 6.0(2)A4(4); affected 6.0(2)A4(5); affected 6.0(2)A4(6); affected 6.0(2)A6(1); affected 6.0(2)A6(1a); affected 6.0(2)A6(2); affected 6.0(2)A6(2a); affected 6.0(2)A6(3); affected 6.0(2)A6(3a); affected 6.0(2)A6(4); affected 6.0(2)A6(4a); affected 6.0(2)A6(5); affected 6.0(2)A6(5a); affected 6.0(2)A6(5b); affected 6.0(2)A6(6); affected 6.0(2)A6(7); affected 6.0(2)A6(8); affected 6.0(2)A7(1); affected 6.0(2)A7(1a); affected 6.0(2)A7(2); affected 6.0(2)A7(2a); affected 6.0(2)A8(1); affected 6.0(2)A8(2); affected 6.0(2)A8(3); affected 6.0(2)A8(4); affected 6.0(2)A8(4a); affected 6.0(2)A8(5); affected 6.0(2)A8(6); affected 6.0(2)A8(7); affected 6.0(2)A8(7a); affected 6.0(2)A8(7b); affected 6.0(2)A8(8); affected 6.0(2)A8(9); affected 6.0(2)A8(10a); affected 6.0(2)A8(10); affected 6.0(2)A8(11); affected 6.0(2)A8(11a); affected 6.0(2)A8(11b); affected 6.0(2)U2(1); affected 6.0(2)U2(2); affected 6.0(2)U2(3); affected 6.0(2)U2(4); affected 6.0(2)U2(5); affected 6.0(2)U2(6); affected 6.0(2)U3(1); affected 6.0(2)U3(2); affected 6.0(2)U3(3); affected 6.0(2)U3(4); affected 6.0(2)U3(5); affected 6.0(2)U3(6); affected 6.0(2)U3(7); affected 6.0(2)U3(8); affected 6.0(2)U3(9); affected 6.0(2)U4(1); affected 6.0(2)U4(2); affected 6.0(2)U4(3); affected 6.0(2)U4(4); affected 6.0(2)U5(1); affected 6.0(2)U5(2); affected 6.0(2)U5(3); affected 6.0(2)U5(4); affected 6.0(2)U6(1); affected 6.0(2)U6(2); affected 6.0(2)U6(3); affected 6.0(2)U6(4); affected 6.0(2)U6(5); affected 6.0(2)U6(6); affected 6.0(2)U6(7); affected 6.0(2)U6(8); affected 6.0(2)U6(1a); affected 6.0(2)U6(2a); affected 6.0(2)U6(3a); affected 6.0(2)U6(4a); affected 6.0(2)U6(5a); affected 6.0(2)U6(5b); affected 6.0(2)U6(5c); affected 6.0(2)U6(9); affected 6.0(2)U6(10); affected 6.2(2); affected 6.2(2a); affected 6.2(6); affected 6.2(6b); affected 6.2(8); affected 6.2(8a); affected 6.2(8b); affected 6.2(10); affected 6.2(12); affected 6.2(18); affected 6.2(16); affected 6.2(14); affected 6.2(6a); affected 6.2(20); affected 6.2(1); affected 6.2(3); affected 6.2(5); affected 6.2(5a); affected 6.2(5b); affected 6.2(7); affected 6.2(9); affected 6.2(9a); affected 6.2(9b); affected 6.2(9c); affected 6.2(11); affected 6.2(11b); affected 6.2(11c); affected 6.2(11d); affected 6.2(11e); affected 6.2(13); affected 6.2(13a); affected 6.2(13b); affected 6.2(15); affected 6.2(17); affected 6.2(19); affected 6.2(21); affected 6.2(23); affected 6.2(20a); affected 6.2(25); affected 6.2(22); affected 6.2(27); affected 6.2(29); affected 6.2(24); affected 6.2(31); affected 6.2(24a); affected 6.2(33); affected 7.0(3)F1(1); affected 7.0(3)F2(1); affected 7.0(3)F2(2); affected 7.0(3)F3(1); affected 7.0(3)F3(2); affected 7.0(3)F3(3); affected 7.0(3)F3(3a); affected 7.0(3)F3(4); affected 7.0(3)F3(3c); affected 7.0(3)F3(5); affected 7.0(3)I2(2a); affected 7.0(3)I2(2b); affected 7.0(3)I2(2c); affected 7.0(3)I2(2d); affected 7.0(3)I2(2e); affected 7.0(3)I2(3); affected 7.0(3)I2(4); affected 7.0(3)I2(5); affected 7.0(3)I2(1); affected 7.0(3)I2(1a); affected 7.0(3)I2(2); affected 7.0(3)I3(1); affected 7.0(3)I4(1); affected 7.0(3)I4(2); affected 7.0(3)I4(3); affected 7.0(3)I4(4); affected 7.0(3)I4(5); affected 7.0(3)I4(6); affected 7.0(3)I4(7); affected 7.0(3)I4(8); affected 7.0(3)I4(8a); affected 7.0(3)I4(8b); affected 7.0(3)I4(8z); affected 7.0(3)I4(9); affected 7.0(3)I5(1); affected 7.0(3)I5(2); affected 7.0(3)I6(1); affected 7.0(3)I6(2); affected 7.0(3)I7(1); affected 7.0(3)I7(2); affected 7.0(3)I7(3); affected 7.0(3)I7(4); affected 7.0(3)I7(5); affected 7.0(3)I7(5a); affected 7.0(3)I7(6); affected 7.0(3)I7(7); affected 7.0(3)I7(8); affected 7.0(3)I7(9); affected 7.0(3)I7(10); affected 7.1(0)N1(1a); affected 7.1(0)N1(1b); affected 7.1(0)N1(1); affected 7.1(1)N1(1); affected 7.1(2)N1(1); affected 7.1(3)N1(1); affected 7.1(3)N1(2); affected 7.1(4)N1(1); affected 7.1(5)N1(1); affected 7.1(5)N1(1b); affected 7.2(0)D1(1); affected 7.2(1)D1(1); affected 7.2(2)D1(2); affected 7.2(2)D1(1); affected 7.3(0)D1(1); affected 7.3(0)DX(1); affected 7.3(0)DY(1); affected 7.3(0)N1(1); affected 7.3(1)D1(1); affected 7.3(1)DY(1); affected 7.3(1)N1(1); affected 7.3(2)D1(1); affected 7.3(2)D1(2); affected 7.3(2)D1(3); affected 7.3(2)D1(3a); affected 7.3(2)N1(1); affected 7.3(3)N1(1); affected 8.0(1); affected 8.1(1); affected 8.1(2); affected 8.1(2a); affected 8.1(1a); affected 8.1(1b); affected 8.2(1); affected 8.2(2); affected 8.2(3); affected 8.2(4); affected 8.2(5); affected 8.2(6); affected 8.2(7); affected 8.2(7a); affected 8.2(8); affected 8.2(9); affected 8.3(1); affected 8.3(2); affected 9.2(1); affected 9.2(2); affected 9.2(2t); affected 9.2(3); affected 9.2(4); affected 9.2(2v); affected 9.2(1a); affected 7.3(4)N1(1); affected 7.3(3)D1(1); affected 7.3(4)D1(1); affected 7.3(5)N1(1); affected 5.2(1)SK3(1.1); affected 5.2(1)SK3(2.1); affected 5.2(1)SK3(2.2); affected 5.2(1)SK3(2.2b); affected 5.2(1)SK3(2.1a); affected 5.2(1)SV5(1.1); affected 5.2(1)SV5(1.2); affected 5.2(1)SV5(1.3); affected 5.2(1)SV5(1.3a); affected 5.2(1)SV5(1.3b); affected 5.2(1)SV5(1.3c); affected 8.4(1); affected 8.4(1a); affected 8.4(2); affected 8.4(2a); affected 8.4(3); affected 8.4(2b); affected 8.4(4); affected 8.4(2c); affected 8.4(4a); affected 8.4(5); affected 8.4(2d); affected 8.4(6); affected 8.4(2e); affected 8.4(6a); affected 8.4(7); affected 8.4(2f); affected 9.3(1); affected 9.3(2); affected 9.3(3); affected 9.3(4); affected 9.3(5); affected 9.3(6); affected 9.3(7); affected 9.3(7a); affected 9.3(8); affected 9.3(9); affected 9.3(10); affected 9.3(11); affected 7.3(6)N1(1); affected 7.3(5)D1(1); affected 7.3(7)N1(1); affected 7.3(7)N1(1a); affected 7.3(7)N1(1b); affected 7.3(6)D1(1); affected 7.3(8)N1(1); affected 7.3(7)D1(1); affected 7.3(9)N1(1); affected 10.1(1); affected 10.1(2); affected 10.1(2t); affected 8.5(1); affected 7.3(10)N1(1); affected 7.3(8)D1(1); affected 10.2(1); affected 10.2(1q); affected 10.2(2); affected 10.2(3); affected 10.2(3t); affected 10.2(4); affected 10.2(5); affected 7.3(9)D1(1); affected 7.3(11)N1(1); affected 7.3(12)N1(1); affected 10.3(1); affected 10.3(2); affected 7.3(13)N1(1)

Vendor / product

Versions

Cisco / Cisco NX-OS Software

affected 4.2(1)SV1(4); affected 4.2(1)SV1(4a); affected 4.2(1)SV1(4b); affected 4.2(1)SV1(5.1); affected 4.2(1)SV1(5.1a); affected 4.2(1)SV1(5.2); affected 4.2(1)SV1(5.2b); affected 4.2(1)SV2(1.1); affected 4.2(1)SV2(1.1a); affected 4.2(1)SV2(2.1); affected 4.2(1)SV2(2.1a); affected 4.2(1)SV2(2.2); affected 4.2(1)SV2(2.3); affected 5.2(1)SM1(5.1); affected 5.2(1)SM1(5.2); affected 5.2(1)SM1(5.2a); affected 5.2(1)SM1(5.2b); affected 5.2(1)SM1(5.2c); affected 5.2(1)SM3(1.1); affected 5.2(1)SM3(1.1a); affected 5.2(1)SM3(1.1b); affected 5.2(1)SM3(1.1c); affected 5.2(1)SM3(2.1); affected 5.2(1)SV3(1.4); affected 5.2(1)SV3(1.1); affected 5.2(1)SV3(1.3); affected 5.2(1)SV3(1.5a); affected 5.2(1)SV3(1.5b); affected 5.2(1)SV3(1.6); affected 5.2(1)SV3(1.10); affected 5.2(1)SV3(1.15); affected 5.2(1)SV3(2.1); affected 5.2(1)SV3(2.5); affected 5.2(1)SV3(2.8); affected 5.2(1)SV3(3.1); affected 5.2(1)SV3(1.2); affected 5.2(1)SV3(1.4b); affected 5.2(1)SV3(3.15); affected 5.2(1)SV3(4.1); affected 5.2(1)SV3(4.1a); affected 5.2(1)SV3(4.1b); affected 5.2(1)SV3(4.1c); affected 6.0(2)A3(1); affected 6.0(2)A3(2); affected 6.0(2)A3(4); affected 6.0(2)A4(1); affected 6.0(2)A4(2); affected 6.0(2)A4(3); affected 6.0(2)A4(4); affected 6.0(2)A4(5); affected 6.0(2)A4(6); affected 6.0(2)A6(1); affected 6.0(2)A6(1a); affected 6.0(2)A6(2); affected 6.0(2)A6(2a); affected 6.0(2)A6(3); affected 6.0(2)A6(3a); affected 6.0(2)A6(4); affected 6.0(2)A6(4a); affected 6.0(2)A6(5); affected 6.0(2)A6(5a); affected 6.0(2)A6(5b); affected 6.0(2)A6(6); affected 6.0(2)A6(7); affected 6.0(2)A6(8); affected 6.0(2)A7(1); affected 6.0(2)A7(1a); affected 6.0(2)A7(2); affected 6.0(2)A7(2a); affected 6.0(2)A8(1); affected 6.0(2)A8(2); affected 6.0(2)A8(3); affected 6.0(2)A8(4); affected 6.0(2)A8(4a); affected 6.0(2)A8(5); affected 6.0(2)A8(6); affected 6.0(2)A8(7); affected 6.0(2)A8(7a); affected 6.0(2)A8(7b); affected 6.0(2)A8(8); affected 6.0(2)A8(9); affected 6.0(2)A8(10a); affected 6.0(2)A8(10); affected 6.0(2)A8(11); affected 6.0(2)A8(11a); affected 6.0(2)A8(11b); affected 6.0(2)U2(1); affected 6.0(2)U2(2); affected 6.0(2)U2(3); affected 6.0(2)U2(4); affected 6.0(2)U2(5); affected 6.0(2)U2(6); affected 6.0(2)U3(1); affected 6.0(2)U3(2); affected 6.0(2)U3(3); affected 6.0(2)U3(4); affected 6.0(2)U3(5); affected 6.0(2)U3(6); affected 6.0(2)U3(7); affected 6.0(2)U3(8); affected 6.0(2)U3(9); affected 6.0(2)U4(1); affected 6.0(2)U4(2); affected 6.0(2)U4(3); affected 6.0(2)U4(4); affected 6.0(2)U5(1); affected 6.0(2)U5(2); affected 6.0(2)U5(3); affected 6.0(2)U5(4); affected 6.0(2)U6(1); affected 6.0(2)U6(2); affected 6.0(2)U6(3); affected 6.0(2)U6(4); affected 6.0(2)U6(5); affected 6.0(2)U6(6); affected 6.0(2)U6(7); affected 6.0(2)U6(8); affected 6.0(2)U6(1a); affected 6.0(2)U6(2a); affected 6.0(2)U6(3a); affected 6.0(2)U6(4a); affected 6.0(2)U6(5a); affected 6.0(2)U6(5b); affected 6.0(2)U6(5c); affected 6.0(2)U6(9); affected 6.0(2)U6(10); affected 6.2(2); affected 6.2(2a); affected 6.2(6); affected 6.2(6b); affected 6.2(8); affected 6.2(8a); affected 6.2(8b); affected 6.2(10); affected 6.2(12); affected 6.2(18); affected 6.2(16); affected 6.2(14); affected 6.2(6a); affected 6.2(20); affected 6.2(1); affected 6.2(3); affected 6.2(5); affected 6.2(5a); affected 6.2(5b); affected 6.2(7); affected 6.2(9); affected 6.2(9a); affected 6.2(9b); affected 6.2(9c); affected 6.2(11); affected 6.2(11b); affected 6.2(11c); affected 6.2(11d); affected 6.2(11e); affected 6.2(13); affected 6.2(13a); affected 6.2(13b); affected 6.2(15); affected 6.2(17); affected 6.2(19); affected 6.2(21); affected 6.2(23); affected 6.2(20a); affected 6.2(25); affected 6.2(22); affected 6.2(27); affected 6.2(29); affected 6.2(24); affected 6.2(31); affected 6.2(24a); affected 6.2(33); affected 7.0(3)F1(1); affected 7.0(3)F2(1); affected 7.0(3)F2(2); affected 7.0(3)F3(1); affected 7.0(3)F3(2); affected 7.0(3)F3(3); affected 7.0(3)F3(3a); affected 7.0(3)F3(4); affected 7.0(3)F3(3c); affected 7.0(3)F3(5); affected 7.0(3)I2(2a); affected 7.0(3)I2(2b); affected 7.0(3)I2(2c); affected 7.0(3)I2(2d); affected 7.0(3)I2(2e); affected 7.0(3)I2(3); affected 7.0(3)I2(4); affected 7.0(3)I2(5); affected 7.0(3)I2(1); affected 7.0(3)I2(1a); affected 7.0(3)I2(2); affected 7.0(3)I3(1); affected 7.0(3)I4(1); affected 7.0(3)I4(2); affected 7.0(3)I4(3); affected 7.0(3)I4(4); affected 7.0(3)I4(5); affected 7.0(3)I4(6); affected 7.0(3)I4(7); affected 7.0(3)I4(8); affected 7.0(3)I4(8a); affected 7.0(3)I4(8b); affected 7.0(3)I4(8z); affected 7.0(3)I4(9); affected 7.0(3)I5(1); affected 7.0(3)I5(2); affected 7.0(3)I6(1); affected 7.0(3)I6(2); affected 7.0(3)I7(1); affected 7.0(3)I7(2); affected 7.0(3)I7(3); affected 7.0(3)I7(4); affected 7.0(3)I7(5); affected 7.0(3)I7(5a); affected 7.0(3)I7(6); affected 7.0(3)I7(7); affected 7.0(3)I7(8); affected 7.0(3)I7(9); affected 7.0(3)I7(10); affected 7.1(0)N1(1a); affected 7.1(0)N1(1b); affected 7.1(0)N1(1); affected 7.1(1)N1(1); affected 7.1(2)N1(1); affected 7.1(3)N1(1); affected 7.1(3)N1(2); affected 7.1(4)N1(1); affected 7.1(5)N1(1); affected 7.1(5)N1(1b); affected 7.2(0)D1(1); affected 7.2(1)D1(1); affected 7.2(2)D1(2); affected 7.2(2)D1(1); affected 7.3(0)D1(1); affected 7.3(0)DX(1); affected 7.3(0)DY(1); affected 7.3(0)N1(1); affected 7.3(1)D1(1); affected 7.3(1)DY(1); affected 7.3(1)N1(1); affected 7.3(2)D1(1); affected 7.3(2)D1(2); affected 7.3(2)D1(3); affected 7.3(2)D1(3a); affected 7.3(2)N1(1); affected 7.3(3)N1(1); affected 8.0(1); affected 8.1(1); affected 8.1(2); affected 8.1(2a); affected 8.1(1a); affected 8.1(1b); affected 8.2(1); affected 8.2(2); affected 8.2(3); affected 8.2(4); affected 8.2(5); affected 8.2(6); affected 8.2(7); affected 8.2(7a); affected 8.2(8); affected 8.2(9); affected 8.3(1); affected 8.3(2); affected 9.2(1); affected 9.2(2); affected 9.2(2t); affected 9.2(3); affected 9.2(4); affected 9.2(2v); affected 9.2(1a); affected 7.3(4)N1(1); affected 7.3(3)D1(1); affected 7.3(4)D1(1); affected 7.3(5)N1(1); affected 5.2(1)SK3(1.1); affected 5.2(1)SK3(2.1); affected 5.2(1)SK3(2.2); affected 5.2(1)SK3(2.2b); affected 5.2(1)SK3(2.1a); affected 5.2(1)SV5(1.1); affected 5.2(1)SV5(1.2); affected 5.2(1)SV5(1.3); affected 5.2(1)SV5(1.3a); affected 5.2(1)SV5(1.3b); affected 5.2(1)SV5(1.3c); affected 8.4(1); affected 8.4(1a); affected 8.4(2); affected 8.4(2a); affected 8.4(3); affected 8.4(2b); affected 8.4(4); affected 8.4(2c); affected 8.4(4a); affected 8.4(5); affected 8.4(2d); affected 8.4(6); affected 8.4(2e); affected 8.4(6a); affected 8.4(7); affected 8.4(2f); affected 9.3(1); affected 9.3(2); affected 9.3(3); affected 9.3(4); affected 9.3(5); affected 9.3(6); affected 9.3(7); affected 9.3(7a); affected 9.3(8); affected 9.3(9); affected 9.3(10); affected 9.3(11); affected 7.3(6)N1(1); affected 7.3(5)D1(1); affected 7.3(7)N1(1); affected 7.3(7)N1(1a); affected 7.3(7)N1(1b); affected 7.3(6)D1(1); affected 7.3(8)N1(1); affected 7.3(7)D1(1); affected 7.3(9)N1(1); affected 10.1(1); affected 10.1(2); affected 10.1(2t); affected 8.5(1); affected 7.3(10)N1(1); affected 7.3(8)D1(1); affected 10.2(1); affected 10.2(1q); affected 10.2(2); affected 10.2(3); affected 10.2(3t); affected 10.2(4); affected 10.2(5); affected 7.3(9)D1(1); affected 7.3(11)N1(1); affected 7.3(12)N1(1); affected 10.3(1); affected 10.3(2); affected 7.3(13)N1(1)

CWE

CWE-120

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-remoteauth-dos-XB6pv74m

ADP enrichment

CVE

No English description supplied.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-remoteauth-dos-XB6pv74m