CVE-2023-20049

A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of malformed BFD packets that are received on line cards where the BFD hardware offload feature is enabled. An attacker could exploit this vulnerability by sending a crafted IPv4 BFD packet to an affected device. A successful exploit could allow the attacker to cause line card exceptions or a hard reset, resulting in loss of traffic over that line card while the line card reloads.

• CWE-805
• CWE-119

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bfd-XmRescbTVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bfd-XmRescbTVendor Advisory

Published

Mar 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20043A vulnerability in Cisco CX Cloud Agent of could allow an au…6.7
• CVE-2023-20044A vulnerability in Cisco CX Cloud Agent of could allow an au…7.3
• CVE-2023-20045A vulnerability in the web-based management interface of Cis…7.2
• CVE-2023-20046A vulnerability in the key-based SSH authentication feature …8.8
• CVE-2023-20047A vulnerability in the Link Layer Discovery Protocol (LLDP) …6.5
• CVE-2023-20048A vulnerability in the web services interface of Cisco Firep…9.9
• CVE-2023-2005Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable…8.8
• CVE-2023-20050A vulnerability in the CLI of Cisco NX-OS Software could all…7.8
• CVE-2023-20051A vulnerability in the Vector Packet Processor (VPP) of Cisc…7.5
• CVE-2023-20052On Feb 15, 2023, the following vulnerability in the ClamAV s…5.3
• CVE-2023-20053A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20055A vulnerability in the management API of Cisco DNA Center co…8.8