/
← Voltar ao feed
medium

Cisco NX-OS Control Plane DoS Vulnerability (CVE-2026-20173) Due to Improper Rate Limiting

1 fonte(s) · 1 atualização(ões) · publicado 07/10/2026 13:00 · coletado há 3 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed CVE-2026-20173, a medium-severity vulnerability in Cisco NX-OS Software that lets an unauthenticated, remote attacker exhaust system resources and cause a denial of service (DoS). The flaw exists because rate limiting is improperly applied to some protocols. The DoS condition clears without manual intervention soon after the high-rate traffic stops. Cisco has released software updates and states there are no workarounds. The article does not report active exploitation.

Detalhes técnicos

  • An attacker sends a high rate of UDP or TCP connections to a data plane interface on an affected device.
  • Successful exploitation causes instability in various routing and control plane protocols through some packet loss and temporary disruptions.
  • The advisory is part of the Cisco Advance Notification of October 7, 2026, and Cisco NX-OS Software Security Hardening Release: October 2026.
  • Cisco rates the Security Impact as Medium.

Remediação

  • Apply the Cisco NX-OS software updates released by Cisco, as described in advisory cisco-sa-nxos-nscpdos-SnderkC7.
  • No workarounds are available.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 07/10/2026 13:00 · coletado 19/10 18:01 primeiro registro só resumo do feed

    Cisco NX-OS Control Plane DoS Vulnerability (CVE-2026-20173) Due to Improper Rate Limiting

    ler a análise desta fonte

    Cisco disclosed CVE-2026-20173, a medium-severity vulnerability in Cisco NX-OS Software that lets an unauthenticated, remote attacker exhaust system resources and cause a denial of service (DoS). The flaw exists because rate limiting is improperly applied to some protocols. The DoS condition clears without manual intervention soon after the high-rate traffic stops. Cisco has released software updates and states there are no workarounds. The article does not report active exploitation.

    Technical Details

    • An attacker sends a high rate of UDP or TCP connections to a data plane interface on an affected device.
    • Successful exploitation causes instability in various routing and control plane protocols through some packet loss and temporary disruptions.
    • The advisory is part of the Cisco Advance Notification of October 7, 2026, and Cisco NX-OS Software Security Hardening Release: October 2026.
    • Cisco rates the Security Impact as Medium.

    Remediation

    • Apply the Cisco NX-OS software updates released by Cisco, as described in advisory cisco-sa-nxos-nscpdos-SnderkC7.
    • No workarounds are available.