CVE-2023-20169

HIGH

7.4

CVSS Score

Published: August 23, 2023 at 06:19 PM UTC

Updated: June 17, 2026 at 05:29 AM UTC

35 products affected across 1 vendorNx OSNexus 9508Nexus 9516

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.4

Exploit prediction

EPSS 0.3%

Description

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the unexpected restart of the IS-IS process, which could cause the affected device to reload. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2 adjacent to the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

10.3(2)

cisco-nexus-3048 (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172pq (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq (environment) · cisco-nexus-3172tq-32t (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3232 (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-34200yc-sm (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548 (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-9232e (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9408 (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment)

Nexus 3048 · Ciscodevice

80%

All versions

Nexus 31108Pc-V · Ciscodevice

80%

All versions

Nexus 31108Tc-V · Ciscodevice

80%

All versions

Nexus 31128Pq · Ciscodevice

80%

All versions