CVE-2020-3398

A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a BGP session to repeatedly reset, causing a partial denial of service (DoS) condition due to the BGP session being down. The vulnerability is due to incorrect parsing of a specific type of BGP MVPN update message. An attacker could exploit this vulnerability by sending this BGP MVPN update message to a targeted device. A successful exploit could allow the attacker to cause the BGP peer connections to reset, which could lead to BGP route instability and impact traffic. The incoming BGP MVPN update message is valid but is parsed incorrectly by the NX-OS device, which could send a corrupted BGP update to the configured BGP peer. Note: The Cisco implementation of BGP accepts incoming BGP traffic from only explicitly configured peers. To exploit this vulnerability, an attacker must send a specific BGP MVPN update message over an established TCP connection that appears to come from a trusted BGP peer. To do so, the attacker must obtain information about the BGP peers in the trusted network of the affected system.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-mvpn-dos-K8kbCrJpVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxosbgp-mvpn-dos-K8kbCrJpVendor Advisory

Published

Aug 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3391A vulnerability in Cisco Digital Network Architecture (DNA) …6.5
• CVE-2020-3392A vulnerability in the API of Cisco IoT Field Network Direct…7.5
• CVE-2020-3393A vulnerability in the application-hosting subsystem of Cisc…7.8
• CVE-2020-3394A vulnerability in the Enable Secret feature of Cisco Nexus …7.8
• CVE-2020-3396A vulnerability in the file system on the pluggable USB 3.0 …7.2
• CVE-2020-3397A vulnerability in the Border Gateway Protocol (BGP) Multica…8.6
• CVE-2020-3399A vulnerability in the Control and Provisioning of Wireless …8.6
• CVE-2020-3400A vulnerability in the web UI feature of Cisco IOS XE Softwa…8.8
• CVE-2020-3401A vulnerability in the web-based management interface of Cis…6.5
• CVE-2020-3402A vulnerability in the Java Remote Method Invocation (RMI) i…7.5
• CVE-2020-3403A vulnerability in the CLI of Cisco IOS XE Software could al…7.8
• CVE-2020-3404A vulnerability in the persistent Telnet/Secure Shell (SSH) …7.8