CVE-2025-20111
CVSS 3.1 Score 7.4 of 10 (high)
Details
Published Feb 26, 2025
CWE ID 1220
Summary
CVE-2025-20111 is a vulnerability affecting the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode. An unauthenticated, adjacent attacker can exploit this issue by consistently sending malicious Ethernet frames, leading to an unexpected reload of the affected device, causing a Denial of Service (DoS) condition. This vulnerability arises due to improper handling of specific Ethernet frames, making affected devices susceptible to continuous and targeted attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco NX-OS
Affected Vendors
- Cisco