Denial of Service Vulnerability in Cisco Nexus 3000 and 9000 Series Switches

CVE-2025-20111

Summary

A vulnerability exists in the health monitoring diagnostics of Cisco Nexus 3000 and 9000 Series Switches operating in standalone NX-OS mode. An attacker with adjacent access could exploit this flaw by sending a continuous stream of specially crafted Ethernet frames to the device. This exploitation could result in an unexpected device reload, leading to a denial of service condition and impacting network availability. It is crucial for organizations using affected devices to implement appropriate network security measures to mitigate potential risks associated with this vulnerability.

References