8.6

CVE-2021-1586

Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpectedly restart the device, resulting in a denial of service (DoS) condition. This vulnerability exists because TCP traffic sent to a specific port on an affected device is not properly sanitized. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port that is listening on a public-facing IP address for the Multi-Pod or Multi-Site configuration. A successful exploit could allow the attacker to cause the device to restart unexpectedly, resulting in a DoS condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version 15.0(2e)
   Cisco ≫ Nexus 9000v Version -
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92300yc Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 92348gc-x Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93108tc-ex-24 Version -
   Cisco ≫ Nexus 93108tc-fx Version -
   Cisco ≫ Nexus 93108tc-fx-24 Version -
   Cisco ≫ Nexus 93108tc-fx3p Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 9316d-gx Version -
   Cisco ≫ Nexus 93180lc-ex Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 93180yc-ex-24 Version -
   Cisco ≫ Nexus 93180yc-fx Version -
   Cisco ≫ Nexus 93180yc-fx-24 Version -
   Cisco ≫ Nexus 93180yc-fx3 Version -
   Cisco ≫ Nexus 93180yc-fx3s Version -
   Cisco ≫ Nexus 93216tc-fx2 Version -
   Cisco ≫ Nexus 93240yc-fx2 Version -
   Cisco ≫ Nexus 9332c Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 93360yc-fx2 Version -
   Cisco ≫ Nexus 9336c-fx2 Version -
   Cisco ≫ Nexus 9336c-fx2-e Version -
   Cisco ≫ Nexus 9348gc-fxp Version -
   Cisco ≫ Nexus 93600cd-gx Version -
   Cisco ≫ Nexus 9364c Version -
   Cisco ≫ Nexus 9364c-gx Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372px-e Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9372tx-e Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9508 Version -
Cisco ≫ Nx-os Version 15.1(1h)
   Cisco ≫ Nexus 9000v Version -
   Cisco ≫ Nexus 92160yc-x Version -
   Cisco ≫ Nexus 92300yc Version -
   Cisco ≫ Nexus 92304qc Version -
   Cisco ≫ Nexus 92348gc-x Version -
   Cisco ≫ Nexus 9236c Version -
   Cisco ≫ Nexus 9272q Version -
   Cisco ≫ Nexus 93108tc-ex Version -
   Cisco ≫ Nexus 93108tc-ex-24 Version -
   Cisco ≫ Nexus 93108tc-fx Version -
   Cisco ≫ Nexus 93108tc-fx-24 Version -
   Cisco ≫ Nexus 93108tc-fx3p Version -
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 9316d-gx Version -
   Cisco ≫ Nexus 93180lc-ex Version -
   Cisco ≫ Nexus 93180yc-ex Version -
   Cisco ≫ Nexus 93180yc-ex-24 Version -
   Cisco ≫ Nexus 93180yc-fx Version -
   Cisco ≫ Nexus 93180yc-fx-24 Version -
   Cisco ≫ Nexus 93180yc-fx3 Version -
   Cisco ≫ Nexus 93180yc-fx3s Version -
   Cisco ≫ Nexus 93216tc-fx2 Version -
   Cisco ≫ Nexus 93240yc-fx2 Version -
   Cisco ≫ Nexus 9332c Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 93360yc-fx2 Version -
   Cisco ≫ Nexus 9336c-fx2 Version -
   Cisco ≫ Nexus 9336c-fx2-e Version -
   Cisco ≫ Nexus 9348gc-fxp Version -
   Cisco ≫ Nexus 93600cd-gx Version -
   Cisco ≫ Nexus 9364c Version -
   Cisco ≫ Nexus 9364c-gx Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372px-e Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9372tx-e Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9508 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.45% 0.823
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Cisco PSIRT 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-tcp-dos-YXukt6gM
Patch
Vendor Advisory