Facebook Twitter Instagram
    Goobuntu
    • Home
    • Linux
    • Windows
    • Mobile
    • News
    Goobuntu
    Home»News»Cisco Nexus 3000 and 9000 Series Switches Flaw

    Cisco Nexus 3000 and 9000 Series Switches Flaw

    0
    By Goobuntu on August 28, 2023 News
    Share
    Facebook Twitter LinkedIn Pinterest Email

    A Denial-of-Service vulnerability has been discovered in the Cisco Nexus 3000 and 9000 series switches, which could allow a threat actor to cause a denial-of-service condition due to a flaw in the IS-IS (Intermediate System-to-Intermediate System) protocol.

    ISIS is one of the family of IP routing protocols and can also act as an Interior Gateway Protocol (IGP), which is used to distribute IP routing information throughout a very large network that has a single routing policy.

    The vulnerability exists due to the unexpected restart of the IS-IS process, causing an infected device to restart. Threat actors can exploit this vulnerability by sending a crafted IS-IS packet to an infected device that can cause the device to reload.

    CVE-2023-20169: Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability

    Additionally, there is insufficient input validation when parsing ingress IS-IS packets, leading to this denial of service condition on the affected devices. This vulnerability has been assigned with a CVE ID of CVE-2023-20169 and has a severity of 7.4 (High), as stated by NVD. 

    However, there are prerequisites for threat actors to exploit this vulnerability. The threat actor must be layer 2 adjacent to the affected device for successful exploitation. 

    Cisco has released a security advisory for this vulnerability, including a list of affected devices and a list of not vulnerable devices.

    Affected Products & How to Detect

    As mentioned by Cisco, the affected products include Nexus 3000 Series Switches and Nexus 9000 Series Switches in standalone NX-OS mode. In addition, Cisco has also provided steps to detect if a Switch has enabled IS-IS Protocol. 

    “A device that is configured for IS-IS authentication can still be affected by this vulnerability. For more information, see Cisco Nexus 9000 Series NX-OS Unicast Routing Configuration Guide, Release 10.3(x): IS-IS Authentication,” reads the security advisory released by Cisco.

    The list of products that Cisco has confirmed are not vulnerable can be checked in this Cisco security advisory section.

    Keep informed about the latest Cyber Security News by following us on Google News, Linkedin, Twitter, and Facebook.

    Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

    Related Posts

    Forever 21 Systems Hacked: 500,000+ Users Affected

    September 1, 2023

    Hackers Exploit Openfire Vulnerability To Deploy Kinsing Malware

    September 1, 2023

    BadBazaar Malware Attacking Users Via Weaponized Apps

    September 1, 2023

    Leave A Reply Cancel Reply

    Popular Posts
    Forever 21 Systems Hacked: 500,000+ Users Affected
    By GoobuntuSeptember 1, 20230
    How to Fix the Action Center Not Opening in Windows
    By GoobuntuSeptember 1, 20230
    Hackers Exploit Openfire Vulnerability To Deploy Kinsing Malware
    By GoobuntuSeptember 1, 20230
    BadBazaar Malware Attacking Users Via Weaponized Apps
    By GoobuntuSeptember 1, 20230
    © 2023 Goobuntu. All Rights Reserved Goobuntu.
    • Contact Us
    • Privacy Policy
    • DMCA
    • Sitemap

    Type above and press Enter to search. Press Esc to cancel.