Cisco NX-OS Software Vulnerability Could Lead to Denial of Service

CVE-2024-20321

Summary

A vulnerability exists in the External Border Gateway Protocol (eBGP) implementation of Cisco's NX-OS Software, which could be exploited by an unauthenticated remote attacker. This issue arises from the mapping of eBGP traffic to a shared hardware rate-limiter queue, allowing attackers to send specially crafted large volumes of network traffic. Successful exploitation may result in the termination of eBGP neighbor sessions, thus creating a denial of service condition that disrupts network operations. Preventive measures and mitigations are essential to safeguard the affected products from potential exploitation.

References