02 Records
FEED: ACQUIRING
01 RecordSTATE: PUBLISHED
02 Description
CNA: ciscoA vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an
03 Exploitation and scoring
SRC: CISA, FIRST, NVD, RED HAT- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
- Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.- EPSS probability
- 0.71% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Ranks above 50.9% of scored records. A rank, not a probability.
- NVD base score
- 8.6 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
SCHEMA: 5.1
- Published
- 2024-02-28 16:14Z2 YR AGO
- Last updated
- 2024-08-16 20:12Z2 YR AGO
- Reserved
- 2023-11-08
- Assigning CNA
- cisco
- Record state
- PUBLISHED
- Severity
- High (CVSS 8.6)
- CNA CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-400Uncontrolled Resource ConsumptionClass
- CWE-770Allocation of Resources Without Limits or ThrottlingBase
- Data version
- 5.1
- Document digest
- 5c3e87a40fdee4ca4c465441ebd9d06cb8327d8571a6286d315737b51239381a
05 Affected products
PAIRS: 2VendorProductVersionsPlatforms
CiscoCisco NX-OS Software7.0(3)F1(1), 7.0(3)F2(1), 7.0(3)F2(2), 7.0(3)F3(1), 7.0(3)F3(2), 7.0(3)F3(3), 7.0(3)F3(3a), 7.0(3)F3(4), 7.0(3)F3(3c), 7.0(3)F3(5), 9.2(1), 9.2(2), 9.2(2t), 9.2(3), 9.2(4), 9.2(2v), 9.3(1), 9.3(2), 9.3(3), 9.3(4), 9.3(5), 9.3(6), 9.3(7), 9.3(7a), 9.3(8), 9.3(9), 9.3(10), 9.3(11), 9.3(12), 10.1(1), 10.1(2), 10.1(2t), 10.2(1), 10.2(1q), 10.2(2), 10.2(3), 10.2(3t), 10.2(4), 10.2(5), 10.2(3v), 10.2(6), 10.3(1), 10.3(2), 10.3(3), 10.3(99w), 10.3(99x), 10.3(4a), 10.4(1)— cisconx-os7.0\(3\)f1\(1\), 7.0\(3\)f2\(1\), 7.0\(3\)f2\(2\), 7.0\(3\)f3\(1\), 7.0\(3\)f3\(2\), 7.0\(3\)f3\(3\), 7.0\(3\)f3\(3a\), 7.0\(3\)f3\(4\), 7.0\(3\)f3\(3c\), 7.0\(3\)f3\(5\), 9.2\(1\), 9.2\(2\), 9.2\(2t\), 9.2\(3\), 9.2\(4\), 9.2\(2v\), 9.3\(1\), 9.3\(2\), 9.3\(3\), 9.3\(4\), 9.3\(5\), 9.3\(6\), 9.3\(7\), 9.3\(7a\), 9.3\(8\), 9.3\(9\), 9.3\(10\), 9.3\(11\), 9.3\(12\), 10.1\(1\), 10.1\(2\), 10.1\(2t\), 10.2\(1\), 10.2\(1q\), 10.2\(2\), 10.2\(3\), 10.2\(3t\), 10.2\(4\), 10.2\(5\), 10.2\(3v\), 10.2\(6\), 10.3\(1\), 10.3\(2\), 10.3\(3\), 10.3\(99w\), 10.3\(99x\), 10.3\(4a\), 10.4\(1\)—