CVE-2020-3168

CVE-2020-3168 describes a denial-of-service vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere and Cisco NX-OS. An unauthenticated, remote attacker can exploit this by initiating a high volume of failed CLI login attempts, causing the Virtual Supervisor Module (VSM) to become inaccessible. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity leading to a complete loss of availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received some community and media attention.