CVE-2024-20321: High severity cisco nx-os vulnerability
A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20321?
CVE-2024-20321 is classified as a high severity vulnerability that can lead to denial of service conditions on affected devices.
How do I fix CVE-2024-20321?
To remediate CVE-2024-20321, you should update your Cisco NX-OS software to the latest available version that addresses this vulnerability.
Which versions of Cisco NX-OS are affected by CVE-2024-20321?
Cisco NX-OS versions 7.0(3)f1(1), 7.0(3)f2(1), 7.0(3)f2(2), 7.0(3)f3(1), and various versions up to 10.4(1) are impacted by CVE-2024-20321.
What type of attack can exploit CVE-2024-20321?
CVE-2024-20321 can be exploited by an unauthenticated remote attacker to cause a denial of service on the device.
Is CVE-2024-20321 hard to exploit?
CVE-2024-20321 is considered relatively easy to exploit due to the unauthentication requirement and the nature of eBGP traffic.