CVE-2023-20089

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability

MEDIUM

6.5

CVSS Score

Published: February 23, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 05:29 AM UTC

47 products affected across 1 vendorNx OSNexus 9508Nexus 93120Tx

Using Cisco NX-OS System Software in ACI Mode by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS System Software in ACI Mode - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This vulnerability is due to incorrect error checking when parsing ingress LLDP packets. An attacker could exploit this vulnerability by sending a steady stream of crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause a memory leak, which could result in a denial of service (DoS) condition when the device unexpectedly reloads. Note: This vulnerability cannot be exploited by transit traffic through the device. The crafted LLDP packet must be targeted to a directly connected interface, and the attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). In addition, the attack surface for this vulnerability can be reduced by disabling LLDP on interfaces where it is not required.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

15.2(1g)15.2(2e)15.2(2f)15.2(2g)15.2(2h)15.2(3e)15.2(3f)15.2(3g)15.2(4d)15.2(4e)15.2(4f)15.2(5c)15.2(5d)15.2(5e)16.0(1g)16.0(1j)

cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-ex-24 (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93108tc-fx-24 (environment) · cisco-nexus-93108tc-fx3p (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-9316d-gx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-ex-24 (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93180yc-fx-24 (environment) · cisco-nexus-93180yc-fx3 (environment) · cisco-nexus-93180yc-fx3s (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332d-gx2b (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336c-fx2-e (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348d-gx2a (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-93600cd-gx (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9364c-gx (environment) · cisco-nexus-9364d-gx2a (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9408 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9808 (environment)

Nexus 9000V · Ciscodevice

80%

All versions

Nexus 92160Yc-X · Ciscodevice

80%

All versions

Nexus 92300Yc · Ciscodevice

80%

All versions

Nexus 92304Qc · Ciscodevice

80%

All versions