CVE-2026-20048

{"id": "CVE-2026-20048", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "published": "2026-02-25T17:25:25.620", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-dsnmp-cNN39Uh", "source": "psirt@cisco.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-789"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper processing when parsing SNMP requests. An attacker could exploit this vulnerability by continuously sending SNMP queries to a specific MIB of an affected device. A successful exploit could allow the attacker to cause a kernel panic on the device, resulting in a reload and a DoS condition.\r\nNote: This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv1 or SNMPv2c, the attacker must have a valid read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system."}, {"lang": "es", "value": "Una vulnerabilidad en el subsistema del Protocolo Simple de Gesti\u00f3n de Red (SNMP) de los switches de tejido Cisco Nexus serie 9000 en modo ACI podr\u00eda permitir a un atacante remoto autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a un procesamiento incorrecto al analizar solicitudes SNMP. Un atacante podr\u00eda explotar esta vulnerabilidad enviando continuamente consultas SNMP a una MIB espec\u00edfica de un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante causar un p\u00e1nico del kernel en el dispositivo, lo que resultar\u00eda en una recarga y una condici\u00f3n de DoS.\nNota: Esta vulnerabilidad afecta las versiones 1, 2c y 3 de SNMP. Para explotar esta vulnerabilidad a trav\u00e9s de SNMPv1 o SNMPv2c, el atacante debe tener una cadena de comunidad SNMP de solo lectura v\u00e1lida para el sistema afectado. Para explotar esta vulnerabilidad a trav\u00e9s de SNMPv3, el atacante debe tener credenciales de usuario SNMP v\u00e1lidas para el sistema afectado."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "psirt@cisco.com"}