ByteOS Network

CVE Vulnerability Details :

CVE-2025-20262

PUBLISHED

More Info Official Page

Assigner-cisco

Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633

Published At-27 Aug, 2025 | 16:23

Updated At-27 Aug, 2025 | 18:19

▼CVE Numbering Authority (CNA)

Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability

A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition. This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 process to crash and restart, causing potential adjacency flaps and resulting in a DoS of the PIM6 and ephemeral query processes.

Affected Products

Vendor

Cisco Systems, Inc.

Product

Cisco NX-OS Software

Default Status

unknown

Versions

Affected

9.2(3)
9.2(2v)
9.2(1)
9.2(2t)
9.2(3y)
9.3(2)
9.2(4)
9.3(1)
9.3(1z)
9.2(2)
9.3(3)
9.3(4)
9.3(5)
9.3(6)
10.1(2)
10.1(1)
9.3(5w)
9.3(7)
9.3(7k)
10.2(1)
9.3(7a)
9.3(8)
10.2(1q)
10.2(2)
9.3(9)
10.1(2t)
10.2(3)
10.2(3t)
9.3(10)
10.2(2a)
10.3(1)
10.2(4)
10.3(2)
9.3(11)
10.3(3)
10.2(5)
9.3(12)
10.2(3v)
10.4(1)
10.3(99w)
10.2(6)
10.3(3w)
10.3(99x)
10.3(3o)
10.3(4)
10.3(3p)
10.3(4a)
10.4(2)
10.3(3q)
9.3(13)
10.3(5)
10.2(7)
10.4(3)
10.3(3x)
10.3(4g)
10.5(1)
10.2(8)
10.3(3r)
10.3(6)
9.3(14)
10.4(4)
10.3(4h)
10.5(2)
10.4(4g)

Problem Types

Type	CWE ID	Description
cwe	CWE-476	NULL Pointer Dereference

Type: cwe

CWE ID: CWE-476

Description: NULL Pointer Dereference

Metrics

Version	Base score	Base severity	Vector
3.1	5.0	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Version: 3.1

Base score: 5.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Exploits

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

References

Hyperlink	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxospc-pim6-vG4jFPh	N/A

Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxospc-pim6-vG4jFPh

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References