csirt@kutim:~/threat-intel/cve/CVE-2024-20321

Katalog CVE

CVSS 8.6 · High EPSS 0,71%

Kerentanan Uncontrolled Resource Consumption pada cisco nx-os. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.

Rincian

Terbit di NVD
29 Februari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-400: Uncontrolled Resource Consumption
CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari)
0,71% peluang dieksploitasi; lebih tinggi dari 52,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco nx-os Versi 7.0(3)f1(1)
cisco nx-os Versi 7.0(3)f2(1)
cisco nx-os Versi 7.0(3)f2(2)
cisco nx-os Versi 7.0(3)f3(1)
cisco nx-os Versi 7.0(3)f3(2)
cisco nx-os Versi 7.0(3)f3(3)
cisco nx-os Versi 7.0(3)f3(3a)
cisco nx-os Versi 7.0(3)f3(3c)
cisco nx-os Versi 7.0(3)f3(4)
cisco nx-os Versi 7.0(3)f3(5)
cisco nx-os Versi 9.2(1)
cisco nx-os Versi 9.2(2)
cisco nx-os Versi 9.2(2t)
cisco nx-os Versi 9.2(2v)
cisco nx-os Versi 9.2(3)
cisco nx-os Versi 9.2(4)
cisco nx-os Versi 9.3(1)
cisco nx-os Versi 9.3(2)
cisco nx-os Versi 9.3(3)
cisco nx-os Versi 9.3(4)
cisco nx-os Versi 9.3(5)
cisco nx-os Versi 9.3(6)
cisco nx-os Versi 9.3(7)
cisco nx-os Versi 9.3(7a)
cisco nx-os Versi 9.3(8)
cisco nx-os Versi 9.3(9)
cisco nx-os Versi 9.3(10)
cisco nx-os Versi 9.3(11)
cisco nx-os Versi 9.3(12)
cisco nx-os Versi 10.1(1)
cisco nx-os Versi 10.1(2)
cisco nx-os Versi 10.1(2t)
cisco nx-os Versi 10.2(1)
cisco nx-os Versi 10.2(1q)
cisco nx-os Versi 10.2(2)
cisco nx-os Versi 10.2(3)
cisco nx-os Versi 10.2(3t)
cisco nx-os Versi 10.2(3v)
cisco nx-os Versi 10.2(4)
cisco nx-os Versi 10.2(5)
cisco nx-os Versi 10.2(6)
cisco nx-os Versi 10.3(1)
cisco nx-os Versi 10.3(2)
cisco nx-os Versi 10.3(3)
cisco nx-os Versi 10.3(4a)
cisco nx-os Versi 10.3(99w)
cisco nx-os Versi 10.3(99x)
cisco nx-os Versi 10.4(1)

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.