CVE-2021-1231

EPSS 0.12%
Published 24.02.2021 20:15:13
Last modified 21.11.2024 05:43:53
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) interface. This vulnerability is due to incomplete validation of the source of a received LLDP packet. An attacker could exploit this vulnerability by sending a crafted LLDP packet on an SFP interface to an affected device. A successful exploit could allow the attacker to disable switching on the SFP interface, which could disrupt network traffic.

Affected products Warnungen 0 Metrics 4 CWE 2 References 4

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Nx-os Version11.0(1b)

   Cisco ≫ Nexus 9000v Version-
   Cisco ≫ Nexus 92160yc-x Version-
   Cisco ≫ Nexus 92300yc Version-
   Cisco ≫ Nexus 92304qc Version-
   Cisco ≫ Nexus 92348gc-x Version-
   Cisco ≫ Nexus 9236c Version-
   Cisco ≫ Nexus 9272q Version-
   Cisco ≫ Nexus 93108tc-ex Version-
   Cisco ≫ Nexus 93108tc-ex-24 Version-
   Cisco ≫ Nexus 93108tc-fx Version-
   Cisco ≫ Nexus 93108tc-fx-24 Version-
   Cisco ≫ Nexus 93120tx Version-
   Cisco ≫ Nexus 93128tx Version-
   Cisco ≫ Nexus 9316d-gx Version-
   Cisco ≫ Nexus 93180lc-ex Version-
   Cisco ≫ Nexus 93180yc-ex Version-
   Cisco ≫ Nexus 93180yc-ex-24 Version-
   Cisco ≫ Nexus 93180yc-fx Version-
   Cisco ≫ Nexus 93180yc-fx-24 Version-
   Cisco ≫ Nexus 93180yc-fx3 Version-
   Cisco ≫ Nexus 93180yc-fx3s Version-
   Cisco ≫ Nexus 93216tc-fx2 Version-
   Cisco ≫ Nexus 93240yc-fx2 Version-
   Cisco ≫ Nexus 9332c Version-
   Cisco ≫ Nexus 9332pq Version-
   Cisco ≫ Nexus 93360yc-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2-e Version-
   Cisco ≫ Nexus 9336pq Aci Spine Version-
   Cisco ≫ Nexus 9348gc-fxp Version-
   Cisco ≫ Nexus 93600cd-gx Version-
   Cisco ≫ Nexus 9364c Version-
   Cisco ≫ Nexus 9364c-gx Version-
   Cisco ≫ Nexus 9372px Version-
   Cisco ≫ Nexus 9372px-e Version-
   Cisco ≫ Nexus 9372tx Version-
   Cisco ≫ Nexus 9372tx-e Version-
   Cisco ≫ Nexus 9396px Version-
   Cisco ≫ Nexus 9396tx Version-
   Cisco ≫ Nexus 9508 Version-

Cisco ≫ Nx-os Version11.0(1c)

Cisco ≫ Nx-os Version11.0(1d)

Cisco ≫ Nx-os Version11.0(1e)

Cisco ≫ Nx-os Version11.0(2j)

Cisco ≫ Nx-os Version11.0(2m)

Cisco ≫ Nx-os Version11.0(3f)

Cisco ≫ Nx-os Version11.0(3i)

Cisco ≫ Nx-os Version11.0(3k)

Cisco ≫ Nx-os Version11.0(3n)

Cisco ≫ Nx-os Version11.0(3o)

Cisco ≫ Nx-os Version11.0(4g)

Cisco ≫ Nx-os Version11.0(4h)

Cisco ≫ Nx-os Version11.0(4o)

Cisco ≫ Nx-os Version11.0(4q)

Cisco ≫ Nx-os Version11.1(1j)

Cisco ≫ Nx-os Version11.1(1o)

Cisco ≫ Nx-os Version11.1(1r)

Cisco ≫ Nx-os Version11.1(1s)

Cisco ≫ Nx-os Version11.1(2h)

Cisco ≫ Nx-os Version11.1(2i)

Cisco ≫ Nx-os Version11.1(3f)

Cisco ≫ Nx-os Version11.1(4e)

Cisco ≫ Nx-os Version11.1(4f)

Cisco ≫ Nx-os Version11.1(4g)

Cisco ≫ Nx-os Version11.1(4i)

Cisco ≫ Nx-os Version11.1(4l)

Cisco ≫ Nx-os Version11.1(4m)

Cisco ≫ Nx-os Version11.2(1i)

Cisco ≫ Nx-os Version11.2(1k)

Cisco ≫ Nx-os Version11.2(1m)

Cisco ≫ Nx-os Version11.2(2g)

Cisco ≫ Nx-os Version11.2(2h)

Cisco ≫ Nx-os Version11.2(2i)

Cisco ≫ Nx-os Version11.2(2j)

Cisco ≫ Nx-os Version11.2(3c)

Cisco ≫ Nx-os Version11.2(3e)

Cisco ≫ Nx-os Version11.2(3h)

Cisco ≫ Nx-os Version11.2(3m)

Cisco ≫ Nx-os Version11.3(1g)

Cisco ≫ Nx-os Version11.3(1h)

Cisco ≫ Nx-os Version11.3(1i)

Cisco ≫ Nx-os Version11.3(1j)

Cisco ≫ Nx-os Version11.3(2f)

Cisco ≫ Nx-os Version11.3(2h)

Cisco ≫ Nx-os Version11.3(2i)

Cisco ≫ Nx-os Version11.3(2j)

Cisco ≫ Nx-os Version11.3(2k)

Cisco ≫ Nx-os Version12.0(1m)

Cisco ≫ Nx-os Version12.0(1n)

Cisco ≫ Nx-os Version12.0(1o)

Cisco ≫ Nx-os Version12.0(1p)

Cisco ≫ Nx-os Version12.0(1q)

Cisco ≫ Nx-os Version12.0(1r)

Cisco ≫ Nx-os Version12.0(2f)

Cisco ≫ Nx-os Version12.0(2g)

Cisco ≫ Nx-os Version12.0(2h)

Cisco ≫ Nx-os Version12.0(2l)

Cisco ≫ Nx-os Version12.0(2m)

Cisco ≫ Nx-os Version12.0(2n)

Cisco ≫ Nx-os Version12.0(2o)

Cisco ≫ Nx-os Version12.1(1h)

Cisco ≫ Nx-os Version12.1(1i)

Cisco ≫ Nx-os Version12.1(2e)

Cisco ≫ Nx-os Version12.1(2g)

Cisco ≫ Nx-os Version12.1(2k)

Cisco ≫ Nx-os Version12.1(3g)

Cisco ≫ Nx-os Version12.1(3h)

Cisco ≫ Nx-os Version12.1(3j)

Cisco ≫ Nx-os Version12.1(4a)

Cisco ≫ Nx-os Version12.2(1k)

Cisco ≫ Nx-os Version12.2(1n)

Cisco ≫ Nx-os Version12.2(1o)

Cisco ≫ Nx-os Version12.2(2e)

Cisco ≫ Nx-os Version12.2(2f)

Cisco ≫ Nx-os Version12.2(2i)

Cisco ≫ Nx-os Version12.2(2j)

Cisco ≫ Nx-os Version12.2(2k)

Cisco ≫ Nx-os Version12.2(2q)

Cisco ≫ Nx-os Version12.2(3j)

Cisco ≫ Nx-os Version12.2(3p)

Cisco ≫ Nx-os Version12.2(3r)

Cisco ≫ Nx-os Version12.2(3s)

Cisco ≫ Nx-os Version12.2(3t)

Cisco ≫ Nx-os Version12.2(4f)

Cisco ≫ Nx-os Version12.2(4p)

Cisco ≫ Nx-os Version12.2(4q)

Cisco ≫ Nx-os Version12.2(4r)

Cisco ≫ Nx-os Version12.3(1e)

Cisco ≫ Nx-os Version12.3(1f)

Cisco ≫ Nx-os Version12.3(1i)

Cisco ≫ Nx-os Version12.3(1l)

Cisco ≫ Nx-os Version12.3(1o)

Cisco ≫ Nx-os Version12.3(1p)

Cisco ≫ Nx-os Version13.0(1k)

Cisco ≫ Nx-os Version13.0(2h)

Cisco ≫ Nx-os Version13.0(2k)

Cisco ≫ Nx-os Version13.0(2n)

Cisco ≫ Nx-os Version13.1(1i)

Cisco ≫ Nx-os Version13.1(2m)

Cisco ≫ Nx-os Version13.1(2o)

Cisco ≫ Nx-os Version13.1(2p)

Cisco ≫ Nx-os Version13.1(2q)

Cisco ≫ Nx-os Version13.1(2s)

Cisco ≫ Nx-os Version13.1(2t)

Cisco ≫ Nx-os Version13.1(2u)

Cisco ≫ Nx-os Version13.1(2v)

Cisco ≫ Nx-os Version13.2(1l)

Cisco ≫ Nx-os Version13.2(1m)

Cisco ≫ Nx-os Version13.2(2l)

Cisco ≫ Nx-os Version13.2(2o)

Cisco ≫ Nx-os Version13.2(3i)

Cisco ≫ Nx-os Version13.2(3j)

Cisco ≫ Nx-os Version13.2(3n)

Cisco ≫ Nx-os Version13.2(3o)

Cisco ≫ Nx-os Version13.2(3r)

Cisco ≫ Nx-os Version13.2(3s)

Cisco ≫ Nx-os Version13.2(4d)

Cisco ≫ Nx-os Version13.2(4e)

Cisco ≫ Nx-os Version13.2(5d)

Cisco ≫ Nx-os Version13.2(5e)

Cisco ≫ Nx-os Version13.2(5f)

Cisco ≫ Nx-os Version13.2(6i)

Cisco ≫ Nx-os Version13.2(7f)

Cisco ≫ Nx-os Version13.2(7k)

Cisco ≫ Nx-os Version13.2(8d)

Cisco ≫ Nx-os Version13.2(9b)

Cisco ≫ Nx-os Version13.2(9f)

Cisco ≫ Nx-os Version13.2(9h)

Cisco ≫ Nx-os Version13.2(41d)

Cisco ≫ Nx-os Version14.0(1h)

Cisco ≫ Nx-os Version14.0(2c)

Cisco ≫ Nx-os Version14.0(3c)

Cisco ≫ Nx-os Version14.0(3d)

Cisco ≫ Nx-os Version14.1(1i)

Cisco ≫ Nx-os Version14.1(1j)

Cisco ≫ Nx-os Version14.1(1k)

Cisco ≫ Nx-os Version14.1(1l)

Cisco ≫ Nx-os Version14.1(2g)

Cisco ≫ Nx-os Version14.1(2m)

Cisco ≫ Nx-os Version14.1(2o)

Cisco ≫ Nx-os Version14.1(2s)

Cisco ≫ Nx-os Version14.1(2u)

Cisco ≫ Nx-os Version14.1(2w)

Cisco ≫ Nx-os Version14.1(2x)

Cisco ≫ Nx-os Version14.2(1i)

Cisco ≫ Nx-os Version14.2(1j)

Cisco ≫ Nx-os Version14.2(1l)

Cisco ≫ Nx-os Version14.2(2e)

Cisco ≫ Nx-os Version14.2(2f)

Cisco ≫ Nx-os Version14.2(2g)

Cisco ≫ Nx-os Version14.2(3j)

Cisco ≫ Nx-os Version14.2(3l)

Cisco ≫ Nx-os Version14.2(3n)

Cisco ≫ Nx-os Version14.2(3q)

Cisco ≫ Nx-os Version14.2(4i)

Cisco ≫ Nx-os Version14.2(4k)

Cisco ≫ Nx-os Version14.2(4o)

Cisco ≫ Nx-os Version14.2(4p)

Cisco ≫ Nx-os Version14.2(5k)

Cisco ≫ Nx-os Version15.0(1k)

Cisco ≫ Nx-os Version15.0(1l)

Cisco ≫ Nx-os Version15.0(2e)

Cisco ≫ Nx-os Version15.0(2h)

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.12%	0.274

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.7	2.8	1.4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
nvd@nist.gov	2.9	5.5	2.9	AV:A/AC:M/Au:N/C:N/I:N/A:P
psirt@cisco.com	4.7	2.8	1.4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-346 Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-lldap-dos-WerV9CFj

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-1231

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-1231

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-1231

EUVD