Is CVE-2024-20267 being actively exploited?

CVE-2024-20267 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2024-20267?

CVE-2024-20267 has a CVSS 3.1 base score of 8.6 (HIGH).

CVE-2024-20267

HIGH · CVSS 8.6EPSS 0.9%EU EUVD

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of proper error checking when processing an ingress MPLS frame. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that is encapsulated within an MPLS frame to an MPLS-enabled interface of the targeted device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition. Note: The IPv6 packet can be generated multiple hops away from the targeted device and then encapsulated within MPLS. The DoS condition may occur when the NX-OS device processes the packet.

Key facts

CVSS score: 8.6 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-120
EPSS score: 0.9% (60th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2024-17982)
Published: February 29, 2024
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2024-17982 in the EU Vulnerability Database. Last updated in EUVD on August 28, 2024.

View on the EU Vulnerability Database

Affected products

cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os
cisco / nx-os

and 155 more…

Certified products that may be affected

3 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Nexus 9000 MACsec Series Switches Running NX-OS 10.4 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11683-2026 - active
Cisco Nexus 9000 Series Switches Running NX-OS 10.4 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11514-2025 - active
Cisco Nexus 3000 and 9000 Series Switches running NX-OS 9.3 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11173-2021 - archived

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-mpls-dos-R9ycXkwM(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain