Product:
Nexus 9000 Series Fabric Switches
Summary
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the management interface of an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.4 | CVE-2026-20033 |
Exploitation
An attacker can exploit this vulnerability by sending a specially crafted Ethernet frame to the out-of-band management interface of the affected device. If successful, this could lead to an unexpected reload of the device, resulting in a denial of service condition.
Affected Products
- Nexus 9000 Series Fabric Switches in ACI mode: Vulnerable to denial of service due to insufficient validation of Ethernet frames.
Mitigation
To mitigate this vulnerability, it is recommended to implement access controls to restrict access to the management interface and ensure that only trusted devices can communicate with it. Regularly updating the device firmware can also help protect against known vulnerabilities.