CVE-2021-1588

High

Description

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation when an affected device is processing an MPLS echo-request or echo-reply packet. An attacker could exploit this vulnerability by sending malicious MPLS echo-request or echo-reply packets to an interface that is enabled for MPLS forwarding on the affected device. A successful exploit could allow the attacker to cause the MPLS OAM process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCisco Nx-os
PublishedAug 25, 2021
First seenAug 25, 2021
Weakness typeCWE-126CWE-126

How to fix

Affected products

ProductAffected versionsFixed in
cisco nx-os7.0\(3\)i7\(9\), 8.4\(1\), 9.3\(7\)—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.