CVE-2023-20169

Summary

CVE-2023-20169 is a vulnerability affecting the Intermediate System-to-Intermediate System (IS-IS) protocol in Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode. The issue allows unauthenticated, adjacent attackers to send crafted IS-IS packets, leading to unexpected IS-IS process restarts and subsequent device reloads. This vulnerability is caused by insufficient input validation, potentially resulting in a denial of service condition. The attacker must be Layer 2 adjacent to the affected device to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.