Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Cisco Nexus 9000 Series Fabric Switches operating in ACI mode. This issue allows an unauthenticated, adjacent attacker to cause the affected device to reload unexpectedly, leading to a DoS condition. The vulnerability arises from insufficient validation when processing certain Ethernet frames. Exploitation involves sending a crafted Ethernet frame to the device's out-of-band management interface.

Impact

Exploitation of this vulnerability causes the device to reload unexpectedly, creating a denial-of-service condition.

Remediation

Cisco has released software updates to address this vulnerability. For guidance on determining the best release for Cisco Nexus 9000 Series Switches, refer to the Recommended Releases document available on the Cisco website.