CVE-2026-20010: fallo de gravedad alta en Cisco NX-OS Software
Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.4epss 0.2%
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly.
This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Productos afectados
Cisco · Cisco NX-OS SoftwareCisco · Cisco NX-OS System Software in ACI ModeCisco · Cisco Unified Computing System (Managed)CVEs relacionadas — Cisco NX-OS Software
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-20399MEDIUMCisco NX-OS Software CLI Command Injection VulnerabilityEPSS 4.3%KEVCVE-2022-20650HIGHCisco NX-OS Software NX-API Command Injection VulnerabilityEPSS 14.5%CVE-2022-20624HIGHCisco NX-OS Software Cisco Fabric Services Over IP Denial of Service VulnerabilityEPSS 12.4%CVE-2022-20623HIGHCisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service VulnerabilityEPSS 11.9%CVE-2020-3119HIGHCisco NX-OS Software Cisco Discovery Protocol Remote Code Execution VulnerabilityEPSS 4.8%CVE-2026-76455CRITICALCisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control VulnerabilitiesEPSS 3.6%