AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-20049

HIGH · CVSS 8.6 EPSS 1.05% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-03-09 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.6. It affects Cisco. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable. It may lead to a denial-of-service condition.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-20049
Severity
HIGH
CVSS
8.6
EPSS
1.05%
Cisco

Original NVD Description

A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of malformed BFD packets that are received on line cards where the BFD hardware offload feature is enabled. An attacker could exploit this vulnerability by sending a crafted IPv4 BFD packet to an affected device. A successful exploit could allow the attacker to cause line card exceptions or a hard reset, resulting in loss of traffic over that line card while the line card reloads.

Related CVEs

Other vulnerabilities affecting the same vendor(s)