Database/Control plane, storage & DevOps
Cisco Nexus 3000/9000 (health monitoring diagnostics): FABRIC DOS: the health monitoring diagnostics subsystem on Nexus
Impact
FABRIC DOS: the health monitoring diagnostics subsystem on Nexus 3000 and 9000 switches in standalone NX-OS mode can be driven into a denial of service by an unauthenticated attacker. The irony is worth noting for operators — the subsystem whose job is to tell you the switch is healthy is itself the thing that takes it down.
Who can reach it
Unauthenticated, remote — traffic reaching the affected diagnostics handling on the switch.
What to do
NX-OS upgrade plus reload per switch, staged across MLAG/ECMP pairs. Restrict management-plane reachability with CoPP in the meantime — a live config change.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.