# CVE-2025-20111

## Summary

- **CVE ID:** CVE-2025-20111
- **Severity:** HIGH
- **CVSS Score:** 7.4 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
- **CWE:** CWE-1220
- **Published:** Feb 26, 2025
- **Last Modified:** Mar 12, 2026

## Description

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload.

## Affected Products

- Cisco — Cisco NX-OS Software (9.3(2))
- Cisco — Cisco NX-OS Software (9.3(1))
- Cisco — Cisco NX-OS Software (9.3(1z))
- Cisco — Cisco NX-OS Software (9.3(3))
- Cisco — Cisco NX-OS Software (9.3(4))
- Cisco — Cisco NX-OS Software (9.3(5))
- Cisco — Cisco NX-OS Software (9.3(6))
- Cisco — Cisco NX-OS Software (10.1(2))
- Cisco — Cisco NX-OS Software (10.1(1))
- Cisco — Cisco NX-OS Software (9.3(5w))
- Cisco — Cisco NX-OS Software (9.3(7))
- Cisco — Cisco NX-OS Software (9.3(7k))
- Cisco — Cisco NX-OS Software (10.2(1))
- Cisco — Cisco NX-OS Software (9.3(7a))
- Cisco — Cisco NX-OS Software (9.3(8))
- Cisco — Cisco NX-OS Software (10.2(1q))
- Cisco — Cisco NX-OS Software (10.2(2))
- Cisco — Cisco NX-OS Software (9.3(9))
- Cisco — Cisco NX-OS Software (10.1(2t))
- Cisco — Cisco NX-OS Software (10.2(3))
- Cisco — Cisco NX-OS Software (10.2(3t))
- Cisco — Cisco NX-OS Software (9.3(10))
- Cisco — Cisco NX-OS Software (10.2(2a))
- Cisco — Cisco NX-OS Software (10.3(1))
- Cisco — Cisco NX-OS Software (10.2(4))
- Cisco — Cisco NX-OS Software (10.3(2))
- Cisco — Cisco NX-OS Software (9.3(11))
- Cisco — Cisco NX-OS Software (10.3(3))
- Cisco — Cisco NX-OS Software (10.2(5))
- Cisco — Cisco NX-OS Software (9.3(12))
- Cisco — Cisco NX-OS Software (10.2(3v))
- Cisco — Cisco NX-OS Software (10.4(1))
- Cisco — Cisco NX-OS Software (10.3(99w))
- Cisco — Cisco NX-OS Software (10.2(6))
- Cisco — Cisco NX-OS Software (10.3(3w))
- Cisco — Cisco NX-OS Software (10.3(99x))
- Cisco — Cisco NX-OS Software (10.3(3o))
- Cisco — Cisco NX-OS Software (10.3(4))
- Cisco — Cisco NX-OS Software (10.3(3p))
- Cisco — Cisco NX-OS Software (10.3(4a))
- Cisco — Cisco NX-OS Software (10.4(2))
- Cisco — Cisco NX-OS Software (10.3(3q))
- Cisco — Cisco NX-OS Software (9.3(13))
- Cisco — Cisco NX-OS Software (10.3(5))
- Cisco — Cisco NX-OS Software (10.2(7))
- Cisco — Cisco NX-OS Software (10.4(3))
- Cisco — Cisco NX-OS Software (10.3(3x))
- Cisco — Cisco NX-OS Software (10.3(4g))
- Cisco — Cisco NX-OS Software (10.5(1))
- Cisco — Cisco NX-OS Software (10.2(8))
- Cisco — Cisco NX-OS Software (10.3(3r))
- Cisco — Cisco NX-OS Software (9.3(14))
- Cisco — Cisco NX-OS Software (10.3(4h))

## References

- [CNA](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k-healthdos-eOqSWK4g)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.32%
- **EPSS Percentile:** 24.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._