← CVE Intelligence

CVE-2025-20111

Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability PUBLISHED

Description (CNA)

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco NX-OS Softwareaffected 9.3(2); affected 9.3(1); affected 9.3(1z); affected 9.3(3); affected 9.3(4); affected 9.3(5); affected 9.3(6); affected 10.1(2); affected 10.1(1); affected 9.3(5w); affected 9.3(7); affected 9.3(7k); affected 10.2(1); affected 9.3(7a); affected 9.3(8); affected 10.2(1q); affected 10.2(2); affected 9.3(9); affected 10.1(2t); affected 10.2(3); affected 10.2(3t); affected 9.3(10); affected 10.2(2a); affected 10.3(1); affected 10.2(4); affected 10.3(2); affected 9.3(11); affected 10.3(3); affected 10.2(5); affected 9.3(12); affected 10.2(3v); affected 10.4(1); affected 10.3(99w); affected 10.2(6); affected 10.3(3w); affected 10.3(99x); affected 10.3(3o); affected 10.3(4); affected 10.3(3p); affected 10.3(4a); affected 10.4(2); affected 10.3(3q); affected 9.3(13); affected 10.3(5); affected 10.2(7); affected 10.4(3); affected 10.3(3x); affected 10.3(4g); affected 10.5(1); affected 10.2(8); affected 10.3(3r); affected 9.3(14); affected 10.3(4h)

CWE

CWE-1220

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.