All vulnerabilities
CVE-2026-20173

Cisco NX-OS Software Denial of Service Vulnerability

Cisco Cisco NX-OS SoftwareNetwork & edge
Open in ThreatlineRecord JSON
CVSS
5.8Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.37%Chance of exploitation activity in the next 30 days, higher than 30% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published7 Oct 2026Updated 7 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.

This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.

Text from CVE List

Affected versions 30

  • Cisco NX-OS Softwareaffected: 8.2(5)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(5)D1(1)CVE List
  • Cisco NX-OS Softwareaffected: 8.4(2)CVE List
  • Cisco NX-OS Softwareaffected: 8.4(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2v)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(4)D1(1)CVE List
  • Cisco NX-OS Softwareaffected: 8.2(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2t)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(3y)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 8.1(1)CVE List
  • Cisco NX-OS Softwareaffected: 8.2(2)CVE List
  • Cisco NX-OS Softwareaffected: 8.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(2)D1(3a)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(4)CVE List
  • Cisco NX-OS Softwareaffected: 8.1(2)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(3)D1(1)CVE List
  • Cisco NX-OS Softwareaffected: 8.2(3)CVE List
  • Cisco NX-OS Softwareaffected: 8.4(1)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(0)DX(1)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(2)D1(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(2)D1(2)CVE List
  • Cisco NX-OS Softwareaffected: 8.2(4)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1z)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2)CVE List
  • Cisco NX-OS Softwareaffected: 8.1(2a)CVE List
  • Cisco NX-OS Softwareaffected: 7.3(2)D1(3)CVE List

References 1