CVE-2024-20321
Last modified
CVE-2024-20321 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | 7.0\(3\)f1\(1\) |
| Cisco | Nx-Os | 7.0\(3\)f2\(1\) |
| Cisco | Nx-Os | 7.0\(3\)f2\(2\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(1\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(2\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(3\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(3a\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(3c\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(4\) |
| Cisco | Nx-Os | 7.0\(3\)f3\(5\) |
| Cisco | Nx-Os | 9.2\(1\) |
| Cisco | Nx-Os | 9.2\(2\) |
| Cisco | Nx-Os | 9.2\(2t\) |
| Cisco | Nx-Os | 9.2\(2v\) |
| Cisco | Nx-Os | 9.2\(3\) |
| Cisco | Nx-Os | 9.2\(4\) |
| Cisco | Nx-Os | 9.3\(1\) |
| Cisco | Nx-Os | 9.3\(2\) |
| Cisco | Nx-Os | 9.3\(3\) |
| Cisco | Nx-Os | 9.3\(4\) |
| Cisco | Nx-Os | 9.3\(5\) |
| Cisco | Nx-Os | 9.3\(6\) |
| Cisco | Nx-Os | 9.3\(7\) |
| Cisco | Nx-Os | 9.3\(7a\) |
| Cisco | Nx-Os | 9.3\(8\) |
| Cisco | Nx-Os | 9.3\(9\) |
| Cisco | Nx-Os | 9.3\(10\) |
| Cisco | Nx-Os | 9.3\(11\) |
| Cisco | Nx-Os | 9.3\(12\) |
| Cisco | Nx-Os | 10.1\(1\) |
| Cisco | Nx-Os | 10.1\(2\) |
| Cisco | Nx-Os | 10.1\(2t\) |
| Cisco | Nx-Os | 10.2\(1\) |
| Cisco | Nx-Os | 10.2\(1q\) |
| Cisco | Nx-Os | 10.2\(2\) |
| Cisco | Nx-Os | 10.2\(3\) |
| Cisco | Nx-Os | 10.2\(3t\) |
| Cisco | Nx-Os | 10.2\(3v\) |
| Cisco | Nx-Os | 10.2\(4\) |
| Cisco | Nx-Os | 10.2\(5\) |
| Cisco | Nx-Os | 10.2\(6\) |
| Cisco | Nx-Os | 10.3\(1\) |
| Cisco | Nx-Os | 10.3\(2\) |
| Cisco | Nx-Os | 10.3\(3\) |
| Cisco | Nx-Os | 10.3\(4a\) |
| Cisco | Nx-Os | 10.3\(99w\) |
| Cisco | Nx-Os | 10.3\(99x\) |
| Cisco | Nx-Os | 10.4\(1\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-20321?
How severe is CVE-2024-20321?
How do I fix CVE-2024-20321?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-20316A vulnerability in the data model interface (DMI) services o…5.3
- CVE-2024-20317A vulnerability in the handling of specific Ethernet frames …7.4
- CVE-2024-20318A vulnerability in the Layer 2 Ethernet services of Cisco IO…7.4
- CVE-2024-20319A vulnerability in the UDP forwarding code of Cisco IOS XR S…4.3
- CVE-2024-2032A race condition vulnerability exists in zenml-io/zenml vers…3.1
- CVE-2024-20320A vulnerability in the SSH client feature of Cisco IOS XR So…7.8
- CVE-2024-20322A vulnerability in the access control list (ACL) processing …5.8
- CVE-2024-20323A vulnerability in Cisco Intelligent Node (iNode) Software c…7.5
- CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could al…5.5
- CVE-2024-20325A vulnerability in the Live Data server of Cisco Unified Int…7.1
- CVE-2024-20326A vulnerability in the ConfD CLI and the Cisco Crosswork Ne…7.8
- CVE-2024-20327A vulnerability in the PPP over Ethernet (PPPoE) termination…7.4
Are you affected by CVE-2024-20321?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST