Skip to content
fr Sign in
8.6 High

CVE-2024-20267 A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote…

Description

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of proper error checking when processing an ingress MPLS frame. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that is encapsulated within an MPLS frame to an MPLS-enabled interface of the targeted device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition. Note: The IPv6 packet can be generated multiple hops away from the targeted device and then encapsulated within MPLS. The DoS condition may occur when the NX-OS device processes the packet.

Affected products and versions

Product Affected versions Fixed in
Cisco NX-OS Software Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco NX-OS Software

The 102 CVEs of Cisco NX-OS Software →
CVE-2026-76501 A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of… 9.8 Critical CVE-2026-76486 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known… 9.8 Critical CVE-2026-76485 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known… 9.8 Critical CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 8.6 High
Track this CVE