First published: Wed Feb 26 2020(Updated: )
A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200226-mds-ovrld-dos This advisory is part of the February 2020 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication, which includes six Cisco Security Advisories that describe six vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: February 2020 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication.
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco NX-OS | ||
Cisco MDS 9000 Series Multilayer Switches |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of cisco-sa-20200226-mds-ovrld-dos is classified as high due to its potential impact on device availability.
To fix cisco-sa-20200226-mds-ovrld-dos, it is recommended to apply the latest software updates provided by Cisco for NX-OS and MDS 9000 Series switches.
Cisco MDS 9000 Series Multilayer Switches running NX-OS Software are affected by cisco-sa-20200226-mds-ovrld-dos.
Yes, cisco-sa-20200226-mds-ovrld-dos can be exploited by unauthenticated remote attackers.
The main risk associated with cisco-sa-20200226-mds-ovrld-dos is denial of service (DoS) conditions leading to disrupted network operations.