Impact
The flaw stems from an improper handling of exceptional conditions in Cisco NX‑OS software. When an exception occurs, the system may respond unpredictably, potentially halting services or becoming unresponsive, which can be exploited to deny availability of network infrastructure. The vulnerability aligns with CWE‑703 and carries a high CVSS score of 8.6, indicating significant potential for harm if an attacker can trigger the defective code path.
Affected Systems
Affected items include Cisco NX‑OS Software, Cisco NX‑OS System Software in ACI Mode, and Cisco Unified Computing System (Managed). No specific version numbers are provided in the advisory, so administrators should review all NX‑OS deployments for applicability.
Risk and Exploitability
The CVSS score reflects a severe flaw, but the EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attack vector is not explicitly documented; however, the nature of the exception handling suggests that either local or remote conditions could invoke the flaw depending on deployment. Given the high severity and lack of detailed exploitation evidence, the risk remains high and warrants prompt remediation.
OpenCVE Enrichment