← CVE Intelligence

CVE-2026-20173

Cisco NX-OS Software Denial of Service Vulnerability PUBLISHED

Description (CNA)

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.

Affected (CNA)

Vendor / productVersions
Cisco / Cisco NX-OS Softwareaffected 8.2(5); affected 7.3(5)D1(1); affected 8.4(2); affected 8.4(3); affected 9.2(3); affected 9.2(2v); affected 7.3(4)D1(1); affected 8.2(1); affected 9.2(1); affected 9.2(2t); affected 9.2(3y); affected 9.3(2); affected 8.1(1); affected 8.2(2); affected 8.3(2); affected 7.3(2)D1(3a); affected 9.2(4); affected 8.1(2); affected 7.3(3)D1(1); affected 8.2(3); affected 8.4(1); affected 7.3(0)DX(1); affected 7.3(2)D1(1); affected 9.3(1); affected 7.3(2)D1(2); affected 8.2(4); affected 9.3(1z); affected 9.2(2); affected 8.1(2a); affected 7.3(2)D1(3); affected 8.3(1); affected 7.3(1)D1(1); affected 7.3(0)D1(1); affected 9.3(3); affected 7.3(2)D1(1d); affected 9.3(4); affected 7.3(6)D1(1); affected 8.2(6); affected 9.3(5); affected 9.3(6); affected 8.4(4); affected 7.3(7)D1(1); affected 9.3(5w); affected 8.2(7); affected 9.3(7); affected 9.3(7k); affected 7.3(8)D1(1); affected 9.3(7a); affected 8.2(7a); affected 9.3(8); affected 8.4(4a); affected 8.4(5); affected 8.2(8); affected 9.3(9); affected 7.3(9)D1(1); affected 8.4(6); affected 9.3(10); affected 8.2(9); affected 10.3(1); affected 8.4(7); affected 10.3(2); affected 8.4(6a); affected 9.3(11); affected 10.3(3); affected 8.2(10); affected 9.3(12); affected 10.4(1); affected 8.4(8); affected 10.3(99w); affected 10.3(3w); affected 10.3(99x); affected 10.3(3o); affected 8.4(9); affected 10.3(4); affected 10.3(3p); affected 10.3(4a); affected 10.4(2); affected 10.3(3q); affected 9.3(13); affected 8.2(11); affected 10.3(5); affected 10.4(3); affected 10.3(3x); affected 10.3(4g); affected 10.5(1); affected 8.4(10); affected 10.3(3r); affected 10.3(6); affected 9.3(14); affected 10.4(4); affected 10.3(4h); affected 10.5(2); affected 8.4(11); affected 10.3(7); affected 10.4(5); affected 10.5(3); affected 9.3(15); affected 10.4(4g); affected 10.5(4); affected 8.4(12); affected 10.5(3t); affected 10.3(8); affected 10.4(6); affected 10.5(3s); affected 10.5(3e); affected 10.5(3o); affected 9.3(16); affected 10.5(3p); affected 10.4(7); affected 10.5(5); affected 9.3(17)

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.