The vulnerability arises from improper input validation of IP traffic in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM. This flaw is a stack‑based buffer overflow (CWE‑121) that enables an attacker to execute arbitrary code with root privileges upon sending crafted packets to an IP interface on an affected device. Attackers can also trigger process crashes that lead to system reloads and denial‑of‑service conditions.

Affected products include Cisco NX-OS Software running on Nexus 3000 and 9000 Series switches. No specific version ranges are supplied in the advisory, so any switch running NX‑OS with NGOAM enabled should be considered vulnerable.

The CVSS score of 9.8 indicates critical severity. The exploit is remote, unauthenticated, and relies on sending malicious VXLAN packets; no prior authentication or privileged credentials are required. Although EPSS data is unavailable, the high CVSS and lack of mitigation in the product imply a substantial risk. The vulnerability is not listed in CISA’s KEV catalog, but the absence does not reduce its potential impact.