Cisco Nexus Dashboard DNS DoS via Continuous Malformed Requests
CVE-2023-20014 Published on March 1, 2023
A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.
Vulnerability Analysis
CVE-2023-20014 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
Products Associated with CVE-2023-20014
Want to know whenever a new CVE is published for Cisco Nexus Dashboard? stack.watch will email you.
Affected Versions
Cisco Nexus Dashboard:- Version 1.1(0c) is affected.
- Version 1.1(0d) is affected.
- Version 1.1(2h) is affected.
- Version 1.1(2i) is affected.
- Version 1.1(3c) is affected.
- Version 1.1(3d) is affected.
- Version 1.1(3e) is affected.
- Version 1.1(3f) is affected.
- Version 2.0(1b) is affected.
- Version 2.0(1d) is affected.
- Version 2.0(2g) is affected.
- Version 2.0(2h) is affected.
- Version 2.1(1d) is affected.
- Version 2.1(1e) is affected.
- Version 2.1(2d) is affected.
- Version 2.1(2f) is affected.
- Version 2.2(1e) is affected.
- Version 2.2(1h) is affected.
- Version 2.2(2d) is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.