← CVE Intelligence

CVE-2024-20321

Cisco / Cisco NX-OS Software PUBLISHED

Description (CNA)

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco NX-OS Softwareaffected 7.0(3)F1(1); affected 7.0(3)F2(1); affected 7.0(3)F2(2); affected 7.0(3)F3(1); affected 7.0(3)F3(2); affected 7.0(3)F3(3); affected 7.0(3)F3(3a); affected 7.0(3)F3(4); affected 7.0(3)F3(3c); affected 7.0(3)F3(5); affected 9.2(1); affected 9.2(2); affected 9.2(2t); affected 9.2(3); affected 9.2(4); affected 9.2(2v); affected 9.3(1); affected 9.3(2); affected 9.3(3); affected 9.3(4); affected 9.3(5); affected 9.3(6); affected 9.3(7); affected 9.3(7a); affected 9.3(8); affected 9.3(9); affected 9.3(10); affected 9.3(11); affected 9.3(12); affected 10.1(1); affected 10.1(2); affected 10.1(2t); affected 10.2(1); affected 10.2(1q); affected 10.2(2); affected 10.2(3); affected 10.2(3t); affected 10.2(4); affected 10.2(5); affected 10.2(3v); affected 10.2(6); affected 10.3(1); affected 10.3(2); affected 10.3(3); affected 10.3(99w); affected 10.3(99x); affected 10.3(4a); affected 10.4(1)

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.