CVE-2025-20262

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Aug 27, 2025
Source updated: Aug 27, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability

A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition. This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 process to crash and restart, causing potential adjacency flaps and resulting in a DoS of the PIM6 and ephemeral query processes.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco NX-OS Software

Vendor: Cisco
Product: Cisco NX-OS Software
Platforms: Unknown
Default status: unknown

Cisco NX-OS Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
9.2(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(2v)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(2t)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(3y)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(1z)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.2(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.1(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.1(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(5w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(8)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(1q)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(9)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.1(2t)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(3t)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(10)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(2a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(11)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(12)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(3v)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(99w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(99x)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3o)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3p)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3q)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(13)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(7)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3x)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.2(8)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3r)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(14)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(4g)	`affected`	Unavailable	Unavailable	Unavailable	None listed