216.73.216.6

CVE-2025-20241

· Published 27/08/2025 17:15 · Modified 27/08/2025 17:15

Labels: CVE-2025-20241 2025-08-27CVE-2025-20241CWE-733[email protected]

Essential information

Published
27/08/2025 17:15
Modified
27/08/2025 17:15
Author
Creator
CVSS
7.4 HIGH (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVSS metrics

Description

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
cisco / nx-os cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
cisco / nexus 3000 cpe:2.3:h:cisco:nexus_3000:*:*:*:*:*:*:*:*
cisco / nexus 9000 cpe:2.3:h:cisco:nexus_9000:*:*:*:*:*:*:*:*

References