Denial of Service Vulnerability in Cisco Nexus Network Switches

CVE-2025-20262

What is CVE-2025-20262?

A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 and 9000 Series Switches allows an authenticated, low-privileged, remote attacker to potentially trigger a crash of the PIM6 process. This is achieved through improper handling of ephemeral data queries. By sending a specially crafted query via NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry, attackers can exploit this weakness. The exploitation may result in adjacency flaps and a denial of service condition affecting both the PIM6 and ephemeral query processes, leading to network instability.

References