CVE-2025-20111
Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability
Description
A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload.
Weakness: CWE-1220
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco NX-OS Software | Routing & Switching | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco NX-OS Software
Vendor advisory
cisco-sa-n3kn9k-healthdos-eOqSWK4g
Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
Cisco’s rating: High (advisory CVSS 7.4) · Published Feb 26, 2025
Bug IDs: CSCwj98161 , CSCwk41797
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from