CVE-2025-20241

Summary

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload.

This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco NX-OS Software9.2(3)affected
CiscoCisco NX-OS Software7.0(3)I5(2)affected
CiscoCisco NX-OS Software6.0(2)A8(7a)affected
CiscoCisco NX-OS Software7.0(3)I4(5)affected
CiscoCisco NX-OS Software7.0(3)I4(6)affected
CiscoCisco NX-OS Software7.0(3)I4(3)affected
CiscoCisco NX-OS Software9.2(2v)affected
CiscoCisco NX-OS Software7.0(3)I4(7)affected
CiscoCisco NX-OS Software7.0(3)I4(1)affected
CiscoCisco NX-OS Software7.0(3)I4(8)affected
CiscoCisco NX-OS Software7.0(3)I4(2)affected
CiscoCisco NX-OS Software6.0(2)A8(11)affected
CiscoCisco NX-OS Software9.2(1)affected
CiscoCisco NX-OS Software9.2(2t)affected
CiscoCisco NX-OS Software9.2(3y)affected
CiscoCisco NX-OS Software7.0(3)I4(1t)affected
CiscoCisco NX-OS Software7.0(3)I7(6z)affected
CiscoCisco NX-OS Software9.3(2)affected
CiscoCisco NX-OS Software7.0(3)F3(3)affected
CiscoCisco NX-OS Software7.0(3)I7(3z)affected
CiscoCisco NX-OS Software7.0(3)IM7(2)affected
CiscoCisco NX-OS Software6.0(2)A8(11b)affected
CiscoCisco NX-OS Software7.0(3)I7(5a)affected
CiscoCisco NX-OS Software7.0(3)I6(1)affected
CiscoCisco NX-OS Software7.0(3)I5(3b)affected
CiscoCisco NX-OS Software9.2(4)affected
CiscoCisco NX-OS Software6.0(2)A8(10)affected
CiscoCisco NX-OS Software6.0(2)A8(2)affected
CiscoCisco NX-OS Software7.0(3)IC4(4)affected
CiscoCisco NX-OS Software7.0(3)F3(3c)affected
CiscoCisco NX-OS Software7.0(3)F3(1)affected
CiscoCisco NX-OS Software7.0(3)F3(5)affected
CiscoCisco NX-OS Software7.0(3)I7(2)affected
CiscoCisco NX-OS Software7.0(3)I5(3)affected
CiscoCisco NX-OS Software7.0(3)I7(3)affected
CiscoCisco NX-OS Software6.0(2)A8(6)affected
CiscoCisco NX-OS Software7.0(3)I6(2)affected
CiscoCisco NX-OS Software6.0(2)A8(5)affected
CiscoCisco NX-OS Software9.3(1)affected
CiscoCisco NX-OS Software6.0(2)A8(7)affected
CiscoCisco NX-OS Software7.0(3)I7(6)affected
CiscoCisco NX-OS Software6.0(2)A8(11a)affected
CiscoCisco NX-OS Software7.0(3)I4(8z)affected
CiscoCisco NX-OS Software7.0(3)I4(9)affected
CiscoCisco NX-OS Software7.0(3)I7(4)affected
CiscoCisco NX-OS Software7.0(3)I7(7)affected
CiscoCisco NX-OS Software6.0(2)A8(9)affected
CiscoCisco NX-OS Software6.0(2)A8(1)affected
CiscoCisco NX-OS Software6.0(2)A8(10a)affected
CiscoCisco NX-OS Software7.0(3)I5(1)affected
CiscoCisco NX-OS Software9.3(1z)affected
CiscoCisco NX-OS Software9.2(2)affected
CiscoCisco NX-OS Software7.0(3)F3(4)affected
CiscoCisco NX-OS Software7.0(3)I4(8b)affected
CiscoCisco NX-OS Software6.0(2)A8(3)affected
CiscoCisco NX-OS Software7.0(3)I4(6t)affected
CiscoCisco NX-OS Software7.0(3)I5(3a)affected
CiscoCisco NX-OS Software6.0(2)A8(8)affected
CiscoCisco NX-OS Software7.0(3)I7(5)affected
CiscoCisco NX-OS Software7.0(3)F3(3a)affected
CiscoCisco NX-OS Software6.0(2)A8(4)affected
CiscoCisco NX-OS Software7.0(3)I4(8a)affected
CiscoCisco NX-OS Software7.0(3)F3(2)affected
CiscoCisco NX-OS Software7.0(3)I4(4)affected
CiscoCisco NX-OS Software7.0(3)I7(1)affected
CiscoCisco NX-OS Software7.0(3)IA7(2)affected
CiscoCisco NX-OS Software7.0(3)IA7(1)affected
CiscoCisco NX-OS Software6.0(2)A8(7b)affected
CiscoCisco NX-OS Software6.0(2)A8(4a)affected
CiscoCisco NX-OS Software9.3(3)affected
CiscoCisco NX-OS Software7.0(3)I7(8)affected
CiscoCisco NX-OS Software9.3(4)affected
CiscoCisco NX-OS Software9.3(5)affected
CiscoCisco NX-OS Software7.0(3)I7(9)affected
CiscoCisco NX-OS Software9.3(6)affected
CiscoCisco NX-OS Software10.1(2)affected
CiscoCisco NX-OS Software10.1(1)affected
CiscoCisco NX-OS Software9.3(5w)affected
CiscoCisco NX-OS Software9.3(7)affected
CiscoCisco NX-OS Software9.3(7k)affected
CiscoCisco NX-OS Software7.0(3)I7(9w)affected
CiscoCisco NX-OS Software10.2(1)affected
CiscoCisco NX-OS Software9.3(7a)affected
CiscoCisco NX-OS Software9.3(8)affected
CiscoCisco NX-OS Software7.0(3)I7(10)affected
CiscoCisco NX-OS Software10.2(1q)affected
CiscoCisco NX-OS Software10.2(2)affected
CiscoCisco NX-OS Software9.3(9)affected
CiscoCisco NX-OS Software10.1(2t)affected
CiscoCisco NX-OS Software10.2(3)affected
CiscoCisco NX-OS Software10.2(3t)affected
CiscoCisco NX-OS Software9.3(10)affected
CiscoCisco NX-OS Software10.2(2a)affected
CiscoCisco NX-OS Software10.3(1)affected
CiscoCisco NX-OS Software10.2(4)affected
CiscoCisco NX-OS Software10.3(2)affected
CiscoCisco NX-OS Software9.3(11)affected
CiscoCisco NX-OS Software10.3(3)affected
CiscoCisco NX-OS Software10.2(5)affected
CiscoCisco NX-OS Software9.3(12)affected
CiscoCisco NX-OS Software10.2(3v)affected
CiscoCisco NX-OS Software10.4(1)affected
CiscoCisco NX-OS Software10.3(99w)affected
CiscoCisco NX-OS Software10.2(6)affected
CiscoCisco NX-OS Software10.3(3w)affected
CiscoCisco NX-OS Software10.3(99x)affected
CiscoCisco NX-OS Software10.3(3o)affected
CiscoCisco NX-OS Software10.3(4)affected
CiscoCisco NX-OS Software10.3(3p)affected
CiscoCisco NX-OS Software10.3(4a)affected
CiscoCisco NX-OS Software10.4(2)affected
CiscoCisco NX-OS Software10.3(3q)affected
CiscoCisco NX-OS Software9.3(13)affected
CiscoCisco NX-OS Software10.3(5)affected
CiscoCisco NX-OS Software10.2(7)affected
CiscoCisco NX-OS Software10.4(3)affected
CiscoCisco NX-OS Software10.3(3x)affected
CiscoCisco NX-OS Software10.3(4g)affected
CiscoCisco NX-OS Software10.5(1)affected
CiscoCisco NX-OS Software10.2(8)affected
CiscoCisco NX-OS Software10.3(3r)affected
CiscoCisco NX-OS Software10.3(6)affected
CiscoCisco NX-OS Software9.3(14)affected
CiscoCisco NX-OS Software10.4(4)affected
CiscoCisco NX-OS Software10.3(4h)affected
CiscoCisco NX-OS Software10.5(2)affected
CiscoCisco NX-OS Software10.4(4g)affected

Weaknesses

  • CWE-733: Compiler Optimization Removal or Modification of Security-critical Code

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References