BugZero | Cisco BugID CSCwb50013 - Cisco NX-OS Software OSPFv3 Denial of Service Vuln...

Cisco - Defect ID: CSCwb50013

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability

Cisco - Defect ID: CSCwb50013

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score
7.8 High

Overall: 7.8

Severity: 8.2

Lifecycle: 9.1

Popularity: 5.1

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Symptom

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ospfv3-dos-48qutcu The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory.

Conditions

Please refer to the Security Advisory.

Workaround

Please refer to the Security Advisory.

Further Problem Description

Please refer to the Security Advisory.

PSIRT Evaluation

The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 8.6: https://tools.cisco.com/security/center/cvssCalculator.x?vector=CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE ID CVE-2022-20823 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://tools.cisco.com/security/center/resources/security_vulnerability_policy.html

Change history

2025-12-05 Added: 6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5)

Relevant Products

Click on a version to see all relevant bugs

Affected versions:6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5)

Fixed versions: 8.2(10), 8.2(11), 8.2(9), 8.4(10), 8.4(11), 8.4(12), 8.4(13), 8.4(6), 8.4(6a), 8.4(7), 8.4(8), 8.4(9)

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 8.2(10), 8.2(11), 8.2(9), 8.4(10), 8.4(11), 8.4(12), 8.4(13), 8.4(6), 8.4(6a), 8.4(7), 8.4(8), 8.4(9)

Top Cisco Defects

9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.
9.7Defect ID: CSCvm90995
ASR1000-RP2: Rommon fails to boot Cisco IOS software of 1GB size
9.7Defect ID: CSCwc94466
Cisco ASA/FTD Firepower 2100 SSL/TLS Denial of Service Vulnerability
9.7Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.7Defect ID: CSCwc80831
High CPU seen across vEdge platform

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCwb50013

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability

Cisco - Defect ID: CSCwb50013

Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score7.8 High

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

PSIRT Evaluation

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
7.8 High