Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-20014

A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Nexus Dashboard

  • 1.1(0c)affected
  • 1.1(0d)affected
  • 1.1(2h)affected
  • 1.1(2i)affected
  • 1.1(3c)affected
  • 1.1(3d)affected
  • 1.1(3e)affected
  • 1.1(3f)affected
  • 2.0(1b)affected
  • 2.0(1d)affected
  • 2.0(2g)affected
  • 2.0(2h)affected
  • 2.1(1d)affected
  • 2.1(1e)affected
  • 2.1(2d)affected
  • 2.1(2f)affected
  • 2.2(1e)affected
  • 2.2(1h)affected
  • 2.2(2d)affected

References