Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
Published Aug 27, 2025
5.0
MEDIUMCVSS 3.1
EPSS 0.35%
Description
A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition. This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 process to crash and restart, causing potential adjacency flaps and resulting in a DoS of the PIM6 and ephemeral query processes.
Affected products
-
- Version 10.1(1)StatusaffectedConstraints-
- Version 10.1(2)StatusaffectedConstraints-
- Version 10.1(2t)StatusaffectedConstraints-
- Version 10.2(1)StatusaffectedConstraints-
- Version 10.2(1q)StatusaffectedConstraints-
- Version 10.2(2)StatusaffectedConstraints-
- Version 10.2(2a)StatusaffectedConstraints-
- Version 10.2(3)StatusaffectedConstraints-
- Version 10.2(3t)StatusaffectedConstraints-
- Version 10.2(3v)StatusaffectedConstraints-
- Version 10.2(4)StatusaffectedConstraints-
- Version 10.2(5)StatusaffectedConstraints-
- Version 10.2(6)StatusaffectedConstraints-
- Version 10.2(7)StatusaffectedConstraints-
- Version 10.2(8)StatusaffectedConstraints-
- Version 10.3(1)StatusaffectedConstraints-
- Version 10.3(2)StatusaffectedConstraints-
- Version 10.3(3)StatusaffectedConstraints-
- Version 10.3(3o)StatusaffectedConstraints-
- Version 10.3(3p)StatusaffectedConstraints-
- Version 10.3(3q)StatusaffectedConstraints-
- Version 10.3(3r)StatusaffectedConstraints-
- Version 10.3(3w)StatusaffectedConstraints-
- Version 10.3(3x)StatusaffectedConstraints-
- Version 10.3(4)StatusaffectedConstraints-
- Version 10.3(4a)StatusaffectedConstraints-
- Version 10.3(4g)StatusaffectedConstraints-
- Version 10.3(4h)StatusaffectedConstraints-
- Version 10.3(5)StatusaffectedConstraints-
- Version 10.3(6)StatusaffectedConstraints-
- Version 10.3(99w)StatusaffectedConstraints-
- Version 10.3(99x)StatusaffectedConstraints-
- Version 10.4(1)StatusaffectedConstraints-
- Version 10.4(2)StatusaffectedConstraints-
- Version 10.4(3)StatusaffectedConstraints-
- Version 10.4(4)StatusaffectedConstraints-
- Version 10.4(4g)StatusaffectedConstraints-
- Version 10.5(1)StatusaffectedConstraints-
- Version 10.5(2)StatusaffectedConstraints-
- Version 9.2(1)StatusaffectedConstraints-
- Version 9.2(2)StatusaffectedConstraints-
- Version 9.2(2t)StatusaffectedConstraints-
- Version 9.2(2v)StatusaffectedConstraints-
- Version 9.2(3)StatusaffectedConstraints-
- Version 9.2(3y)StatusaffectedConstraints-
- Version 9.2(4)StatusaffectedConstraints-
- Version 9.3(1)StatusaffectedConstraints-
- Version 9.3(10)StatusaffectedConstraints-
- Version 9.3(11)StatusaffectedConstraints-
- Version 9.3(12)StatusaffectedConstraints-
- Version 9.3(13)StatusaffectedConstraints-
- Version 9.3(14)StatusaffectedConstraints-
- Version 9.3(1z)StatusaffectedConstraints-
- Version 9.3(2)StatusaffectedConstraints-
- Version 9.3(3)StatusaffectedConstraints-
- Version 9.3(4)StatusaffectedConstraints-
- Version 9.3(5)StatusaffectedConstraints-
- Version 9.3(5w)StatusaffectedConstraints-
- Version 9.3(6)StatusaffectedConstraints-
- Version 9.3(7)StatusaffectedConstraints-
- Version 9.3(7a)StatusaffectedConstraints-
- Version 9.3(7k)StatusaffectedConstraints-
- Version 9.3(8)StatusaffectedConstraints-
- Version 9.3(9)StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | n/a |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Aug 27, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2025–2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (3 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.35% (0.00352) | 26.47th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.32% (0.00324) | 23.89th | v5 (v2026.06.15) |
| Aug 28, 2025 | 0.13% (0.00131) | 33.47th | v4 (v2025.03.14) |
References (1)
Change history (0)
No recorded changes yet.