CVE-2021-1586

High

Description

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to unexpectedly restart the device, resulting in a denial of service (DoS) condition. This vulnerability exists because TCP traffic sent to a specific port on an affected device is not properly sanitized. An attacker could exploit this vulnerability by sending crafted TCP data to a specific port that is listening on a public-facing IP address for the Multi-Pod or Multi-Site configuration. A successful exploit could allow the attacker to cause the device to restart unexpectedly, resulting in a DoS condition.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCisco Nx-os
PublishedAug 25, 2021
First seenAug 25, 2021
Weakness typeCWE-345CWE-345

How to fix

Affected products

ProductAffected versionsFixed in
cisco nx-os15.0\(2e\), 15.1\(1h\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-1586 · Cisco Nx-os · Dark Radar