A remote, unauthenticated attacker can send a high volume of UDP or TCP connections to a data plane interface on Cisco NX‑OS software, exhausting system resources. The lack of proper rate limiting allows this traffic burst to destabilize routing and control plane protocols, producing packet loss and temporary disruptions that fall into a denial‑of‑service state. The condition resolves once the traffic stops but can interrupt normal device operation during the attack window.

The vulnerability applies to Cisco NX‑OS software; specific affected product versions are not listed in the CNA data provided. Administrators should consult Cisco’s advisory for detailed version guidance and verify whether their devices are running a susceptible release.

The CVSS score of 5.8 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not in the CISA KEV catalog. A successful exploit requires the attacker to send a sustained rate of traffic to the device; no privileged access or persistence is needed beyond this. The impact is a temporary denial of service, which clears after the high‑rate traffic ceases, but it can be disruptive to network operations.