7.4

CVE-2021-1621

Cisco IOS XE Software Interface Queue Wedge Denial of Service Vulnerability

A vulnerability in the Layer 2 punt code of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a queue wedge on an interface that receives specific Layer 2 frames, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of certain Layer 2 frames. An attacker could exploit this vulnerability by sending specific Layer 2 frames on the segment the router is connected to. A successful exploit could allow the attacker to cause a queue wedge on the interface, resulting in a DoS condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version < 17.3.1
   Cisco ≫ 1000 Integrated Services Router Version -
   Cisco ≫ 1100-4g/6g Integrated Services Router Version -
   Cisco ≫ 1100-4p Integrated Services Router Version -
   Cisco ≫ 1100-8p Integrated Services Router Version -
   Cisco ≫ 1100 Integrated Services Router Version -
   Cisco ≫ 1101-4p Integrated Services Router Version -
   Cisco ≫ 1101 Integrated Services Router Version -
   Cisco ≫ 1109-2p Integrated Services Router Version -
   Cisco ≫ 1109-4p Integrated Services Router Version -
   Cisco ≫ 1109 Integrated Services Router Version -
   Cisco ≫ 1111x-8p Integrated Services Router Version -
   Cisco ≫ 1111x Integrated Services Router Version -
   Cisco ≫ 111x Integrated Services Router Version -
   Cisco ≫ 1120 Integrated Services Router Version -
   Cisco ≫ 1160 Integrated Services Router Version -
Cisco ≫ Ios Xe Version < 17.3.1
   Cisco ≫ Asr 1000 Version -
   Cisco ≫ Asr 1000-x Version -
   Cisco ≫ Asr 1001 Version -
   Cisco ≫ Asr 1001-hx Version -
   Cisco ≫ Asr 1001-hx R Version -
   Cisco ≫ Asr 1001-x Version -
   Cisco ≫ Asr 1001-x R Version -
   Cisco ≫ Asr 1002 Version -
   Cisco ≫ Asr 1002-hx Version -
   Cisco ≫ Asr 1002-hx R Version -
   Cisco ≫ Asr 1002-x Version -
   Cisco ≫ Asr 1002-x R Version -
   Cisco ≫ Asr 1004 Version -
   Cisco ≫ Asr 1006 Version -
   Cisco ≫ Asr 1006-x Version -
   Cisco ≫ Asr 1009-x Version -
   Cisco ≫ Asr 1013 Version -
   Cisco ≫ Asr 1023 Version -
Cisco ≫ Ios Xe Version < 17.3.1
   Cisco ≫ Csr 1000v Version -
Cisco ≫ Ios Xe Version < 17.3.1
   Cisco ≫ Isrv Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.283
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 2.8 4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
Cisco PSIRT 7.4 2.8 4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-quewedge-69BsHUBW
Patch
Vendor Advisory