CVE-2021-34714

EPSS 0.24%
Veröffentlicht 23.09.2021 03:15:18
Zuletzt bearbeitet 21.11.2024 06:11:01
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Fxos Version >= 2.2 < 2.2.2.148

Cisco ≫ Fxos Version >= 2.3 < 2.3.1.216

Cisco ≫ Fxos Version >= 2.4 < 2.4.1.273

Cisco ≫ Fxos Version >= 2.6 < 2.6.1.224

Cisco ≫ Fxos Version >= 2.7 < 2.7.1.143

Cisco ≫ Fxos Version >= 2.8 < 2.8.1.143

Cisco ≫ Fxos Version >= 2.9 < 2.9.1.135

Cisco ≫ Firepower Extensible Operating System Version <= 8.4\(3.115\)

   Cisco ≫ Mds 9000 Version-
   Cisco ≫ Mds 9100 Version-
   Cisco ≫ Mds 9132t Version-
   Cisco ≫ Mds 9134 Version-
   Cisco ≫ Mds 9140 Version-
   Cisco ≫ Mds 9148 Version-
   Cisco ≫ Mds 9148s Version-
   Cisco ≫ Mds 9148t Version-
   Cisco ≫ Mds 9200 Version-
   Cisco ≫ Mds 9216 Version-
   Cisco ≫ Mds 9216a Version-
   Cisco ≫ Mds 9216i Version-
   Cisco ≫ Mds 9222i Version-
   Cisco ≫ Mds 9250i Version-
   Cisco ≫ Mds 9396s Version-
   Cisco ≫ Mds 9396t Version-
   Cisco ≫ Mds 9500 Version-
   Cisco ≫ Mds 9506 Version-
   Cisco ≫ Mds 9509 Version-
   Cisco ≫ Mds 9513 Version-
   Cisco ≫ Mds 9700 Version-
   Cisco ≫ Mds 9706 Version-
   Cisco ≫ Mds 9710 Version-
   Cisco ≫ Mds 9718 Version-
   Cisco ≫ Nexus 7000 Version-
   Cisco ≫ Nexus 7000 10-slot Version-
   Cisco ≫ Nexus 7000 18-slot Version-
   Cisco ≫ Nexus 7000 4-slot Version-
   Cisco ≫ Nexus 7000 9-slot Version-
   Cisco ≫ Nexus 7000 Supervisor 1 Version-
   Cisco ≫ Nexus 7000 Supervisor 2 Version-
   Cisco ≫ Nexus 7000 Supervisor 2e Version-
   Cisco ≫ Nexus 7004 Version-
   Cisco ≫ Nexus 7009 Version-
   Cisco ≫ Nexus 7010 Version-
   Cisco ≫ Nexus 7018 Version-
   Cisco ≫ Nexus 7700 Version-
   Cisco ≫ Nexus 7700 10-slot Version-
   Cisco ≫ Nexus 7700 18-slot Version-
   Cisco ≫ Nexus 7700 2-slot Version-
   Cisco ≫ Nexus 7700 6-slot Version-
   Cisco ≫ Nexus 7700 Supervisor 2e Version-
   Cisco ≫ Nexus 7700 Supervisor 3e Version-
   Cisco ≫ Nexus 7702 Version-
   Cisco ≫ Nexus 7706 Version-
   Cisco ≫ Nexus 7710 Version-
   Cisco ≫ Nexus 7718 Version-

Cisco ≫ Ios Version <= 8.4\(3.115\)

Cisco ≫ Ios Xe Version <= 8.4\(3.115\)

Cisco ≫ Ios Xr Version <= 8.4\(3.115\)

Cisco ≫ Nx-os Version <= 8.4\(3.115\)

Cisco ≫ Firepower Extensible Operating System Version <= 7.0\(3\)i7\(9\)

   Cisco ≫ Nexus 3000 Version-
   Cisco ≫ Nexus 3016 Version-
   Cisco ≫ Nexus 3016q Version-
   Cisco ≫ Nexus 3048 Version-
   Cisco ≫ Nexus 3064 Version-
   Cisco ≫ Nexus 3064-32t Version-
   Cisco ≫ Nexus 3064-t Version-
   Cisco ≫ Nexus 3064-x Version-
   Cisco ≫ Nexus 3064t Version-
   Cisco ≫ Nexus 3064x Version-
   Cisco ≫ Nexus 3100 Version-
   Cisco ≫ Nexus 3100-v Version-
   Cisco ≫ Nexus 3100-z Version-
   Cisco ≫ Nexus 3100v Version-
   Cisco ≫ Nexus 31108pc-v Version-
   Cisco ≫ Nexus 31108pv-v Version-
   Cisco ≫ Nexus 31108tc-v Version-
   Cisco ≫ Nexus 31128pq Version-
   Cisco ≫ Nexus 3132c-z Version-
   Cisco ≫ Nexus 3132q Version-
   Cisco ≫ Nexus 3132q-v Version-
   Cisco ≫ Nexus 3132q-x Version-
   Cisco ≫ Nexus 3132q-x/3132q-xl Version-
   Cisco ≫ Nexus 3132q-xl Version-
   Cisco ≫ Nexus 3164q Version-
   Cisco ≫ Nexus 3172 Version-
   Cisco ≫ Nexus 3172pq Version-
   Cisco ≫ Nexus 3172pq-xl Version-
   Cisco ≫ Nexus 3172pq/pq-xl Version-
   Cisco ≫ Nexus 3172tq Version-
   Cisco ≫ Nexus 3172tq-32t Version-
   Cisco ≫ Nexus 3172tq-xl Version-
   Cisco ≫ Nexus 3200 Version-
   Cisco ≫ Nexus 3232c Version-
   Cisco ≫ Nexus 3232c Version-
   Cisco ≫ Nexus 3264c-e Version-
   Cisco ≫ Nexus 3264q Version-
   Cisco ≫ Nexus 3400 Version-
   Cisco ≫ Nexus 3408-s Version-
   Cisco ≫ Nexus 34180yc Version-
   Cisco ≫ Nexus 34200yc-sm Version-
   Cisco ≫ Nexus 3432d-s Version-
   Cisco ≫ Nexus 3464c Version-
   Cisco ≫ Nexus 3500 Version-
   Cisco ≫ Nexus 3500 Platform Version-
   Cisco ≫ Nexus 3524 Version-
   Cisco ≫ Nexus 3524-x Version-
   Cisco ≫ Nexus 3524-x/xl Version-
   Cisco ≫ Nexus 3524-xl Version-
   Cisco ≫ Nexus 3548 Version-
   Cisco ≫ Nexus 3548-x Version-
   Cisco ≫ Nexus 3548-x/xl Version-
   Cisco ≫ Nexus 3548-xl Version-
   Cisco ≫ Nexus 3600 Version-
   Cisco ≫ Nexus 36180yc-r Version-
   Cisco ≫ Nexus 3636c-r Version-
   Cisco ≫ Nexus 9000 Version-
   Cisco ≫ Nexus 9000 In Aci Mode Version-
   Cisco ≫ Nexus 9000 In Standalone Version-
   Cisco ≫ Nexus 9000 In Standalone Nx-os Mode Version-
   Cisco ≫ Nexus 9000v Version-
   Cisco ≫ Nexus 9200 Version-
   Cisco ≫ Nexus 92160yc-x Version-
   Cisco ≫ Nexus 9221c Version-
   Cisco ≫ Nexus 92300yc Version-
   Cisco ≫ Nexus 92304qc Version-
   Cisco ≫ Nexus 92348gc-x Version-
   Cisco ≫ Nexus 9236c Version-
   Cisco ≫ Nexus 9272q Version-
   Cisco ≫ Nexus 9300 Version-
   Cisco ≫ Nexus 93108tc-ex Version-
   Cisco ≫ Nexus 93108tc-ex-24 Version-
   Cisco ≫ Nexus 93108tc-fx Version-
   Cisco ≫ Nexus 93108tc-fx-24 Version-
   Cisco ≫ Nexus 93108tc-fx3p Version-
   Cisco ≫ Nexus 93120tx Version-
   Cisco ≫ Nexus 93128 Version-
   Cisco ≫ Nexus 93128tx Version-
   Cisco ≫ Nexus 9316d-gx Version-
   Cisco ≫ Nexus 93180lc-ex Version-
   Cisco ≫ Nexus 93180tc-ex Version-
   Cisco ≫ Nexus 93180yc-ex Version-
   Cisco ≫ Nexus 93180yc-ex-24 Version-
   Cisco ≫ Nexus 93180yc-fx Version-
   Cisco ≫ Nexus 93180yc-fx-24 Version-
   Cisco ≫ Nexus 93180yc-fx3 Version-
   Cisco ≫ Nexus 93180yc-fx3s Version-
   Cisco ≫ Nexus 93216tc-fx2 Version-
   Cisco ≫ Nexus 93240yc-fx2 Version-
   Cisco ≫ Nexus 9332c Version-
   Cisco ≫ Nexus 9332pq Version-
   Cisco ≫ Nexus 93360yc-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2 Version-
   Cisco ≫ Nexus 9336c-fx2-e Version-
   Cisco ≫ Nexus 9336pq Version-
   Cisco ≫ Nexus 9336pq Aci Spine Version-
   Cisco ≫ Nexus 9348gc-fxp Version-
   Cisco ≫ Nexus 93600cd-gx Version-
   Cisco ≫ Nexus 9364c Version-
   Cisco ≫ Nexus 9364c-gx Version-
   Cisco ≫ Nexus 9372px Version-
   Cisco ≫ Nexus 9372px-e Version-
   Cisco ≫ Nexus 9372tx Version-
   Cisco ≫ Nexus 9372tx-e Version-
   Cisco ≫ Nexus 9396px Version-
   Cisco ≫ Nexus 9396tx Version-
   Cisco ≫ Nexus 9500 Version-
   Cisco ≫ Nexus 9500 Supervisor A Version-
   Cisco ≫ Nexus 9500 Supervisor A+ Version-
   Cisco ≫ Nexus 9500 Supervisor B Version-
   Cisco ≫ Nexus 9500 Supervisor B+ Version-
   Cisco ≫ Nexus 9500r Version-
   Cisco ≫ Nexus 9504 Version-
   Cisco ≫ Nexus 9508 Version-
   Cisco ≫ Nexus 9516 Version-

Cisco ≫ Ios Version <= 7.0\(3\)i7\(9\)

Cisco ≫ Ios Xe Version <= 7.0\(3\)i7\(9\)

Cisco ≫ Ios Xr Version <= 7.0\(3\)i7\(9\)

Cisco ≫ Nx-os Version <= 7.0\(3\)i7\(9\)

Cisco ≫ Firepower Extensible Operating System Version <= 7.3\(8\)n1\(1\)

   Cisco ≫ Nexus 5000 Version-
   Cisco ≫ Nexus 5010 Version-
   Cisco ≫ Nexus 5020 Version-
   Cisco ≫ Nexus 5500 Version-
   Cisco ≫ Nexus 5548p Version-
   Cisco ≫ Nexus 5548up Version-
   Cisco ≫ Nexus 5596t Version-
   Cisco ≫ Nexus 5596up Version-
   Cisco ≫ Nexus 5600 Version-
   Cisco ≫ Nexus 56128p Version-
   Cisco ≫ Nexus 5624q Version-
   Cisco ≫ Nexus 5648q Version-
   Cisco ≫ Nexus 5672up Version-
   Cisco ≫ Nexus 5672up-16g Version-
   Cisco ≫ Nexus 5696q Version-
   Cisco ≫ Nexus 6000 Version-
   Cisco ≫ Nexus 6001 Version-
   Cisco ≫ Nexus 6001p Version-
   Cisco ≫ Nexus 6001t Version-
   Cisco ≫ Nexus 6004 Version-
   Cisco ≫ Nexus 6004x Version-

Cisco ≫ Ios Version <= 7.3\(8\)n1\(1\)

Cisco ≫ Ios Xe Version <= 7.3\(8\)n1\(1\)

Cisco ≫ Ios Xr Version <= 7.3\(8\)n1\(1\)

Cisco ≫ Nx-os Version <= 7.3\(8\)n1\(1\)

Cisco ≫ Firepower Extensible Operating System Version <= 3.2\(3o\)a

   Cisco ≫ Ucs 6200 Version-
   Cisco ≫ Ucs 6248 Up Fabric Interconnect Version-
   Cisco ≫ Ucs 6248up Version-
   Cisco ≫ Ucs 6296 Up Fabric Interconnect Version-
   Cisco ≫ Ucs 6296up Version-
   Cisco ≫ Ucs 6300 Version-
   Cisco ≫ Ucs 6324 Version-
   Cisco ≫ Ucs 6324 Fabric Interconnect Version-
   Cisco ≫ Ucs 6332 Version-
   Cisco ≫ Ucs 6332-16up Version-
   Cisco ≫ Ucs 6332-16up Fabric Interconnect Version-
   Cisco ≫ Ucs 6332 Fabric Interconnect Version-

Cisco ≫ Ios Version <= 3.2\(3o\)a

Cisco ≫ Ios Xe Version <= 3.2\(3o\)a

Cisco ≫ Ios Xr Version <= 3.2\(3o\)a

Cisco ≫ Nx-os Version <= 3.2\(3o\)a

Cisco ≫ Firepower Extensible Operating System Version <= 4.1\(1a\)a

Cisco ≫ Ucs 6400 Version-
Cisco ≫ Ucs 6454 Version-

Cisco ≫ Ios Version <= 4.1\(1a\)a

Cisco ≫ Ucs 6400 Version-
Cisco ≫ Ucs 6454 Version-

Cisco ≫ Ios Xe Version <= 4.1\(1a\)a

Cisco ≫ Ucs 6400 Version-
Cisco ≫ Ucs 6454 Version-

Cisco ≫ Ios Xr Version <= 4.1\(1a\)a

Cisco ≫ Ucs 6400 Version-
Cisco ≫ Ucs 6454 Version-

Cisco ≫ Nx-os Version <= 3.2\(3o\)a

Cisco ≫ Ucs 6400 Version-
Cisco ≫ Ucs 6454 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.474

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.4	2.8	4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov	5.7	5.5	6.9	AV:A/AC:M/Au:N/C:N/I:N/A:C
psirt@cisco.com	7.4	2.8	4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-34714

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-34714

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-34714

EUVD