Product:
Nexus 9000 Series Fabric Switches
Summary
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service condition on an affected device. This vulnerability is due to improper processing when parsing SNMP requests. An attacker could exploit this vulnerability by continuously sending SNMP queries to a specific MIB of an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.7 | CVE-2026-20048 |
Exploitation
To exploit this vulnerability, an attacker must continuously send SNMP queries to a specific Management Information Base (MIB) of the affected device. For SNMP versions 1 and 2c, the attacker needs a valid read-only SNMP community string, while for SNMPv3, valid SNMP user credentials are required. A successful exploit can lead to a kernel panic, causing the device to reload and resulting in a denial of service condition.
Affected Products
- Nexus 9000 Series Fabric Switches in ACI mode: Vulnerable to denial of service due to improper SNMP request processing.
Mitigation
To mitigate this vulnerability, it is recommended to restrict access to SNMP services and ensure that only authorized users have valid credentials. Additionally, monitoring SNMP traffic for unusual patterns can help detect potential exploitation attempts.