Lucene search
HistoryMar 24, 2021 - 8:15 p.m.
CVE-2021-1446
cisco
ios xe
software
vulnerability
remote attacker
dns packets
nat
dos
ipv4
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
48.7%
A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected device inspects certain DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through an affected device that is performing NAT for DNS packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability can be exploited only by traffic that is sent through an affected device via IPv4 packets. The vulnerability cannot be exploited via IPv6 traffic.
Affected configurations
Node
ciscoios_xeMatch3.7.0bs
ORciscoios_xeMatch3.7.0s
ORciscoios_xeMatch3.7.0xas
ORciscoios_xeMatch3.7.0xbs
ORciscoios_xeMatch3.7.1as
ORciscoios_xeMatch3.7.1s
ORciscoios_xeMatch3.7.2s
ORciscoios_xeMatch3.7.2ts
ORciscoios_xeMatch3.7.3s
ORciscoios_xeMatch3.7.4as
ORciscoios_xeMatch3.7.4s
ORciscoios_xeMatch3.7.5s
ORciscoios_xeMatch3.7.6s
ORciscoios_xeMatch3.7.7s
ORciscoios_xeMatch3.7.8s
ORciscoios_xeMatch3.8.0s
ORciscoios_xeMatch3.8.1s
ORciscoios_xeMatch3.8.2s
ORciscoios_xeMatch3.9.0as
ORciscoios_xeMatch3.9.0s
ORciscoios_xeMatch3.9.0xas
ORciscoios_xeMatch3.9.1as
ORciscoios_xeMatch3.9.1s
ORciscoios_xeMatch3.9.2s
ORciscoios_xeMatch3.10.0s
ORciscoios_xeMatch3.10.1s
ORciscoios_xeMatch3.10.1xbs
ORciscoios_xeMatch3.10.1xcs
ORciscoios_xeMatch3.10.2as
ORciscoios_xeMatch3.10.2s
ORciscoios_xeMatch3.10.2ts
ORciscoios_xeMatch3.10.3s
ORciscoios_xeMatch3.10.4s
ORciscoios_xeMatch3.10.5s
ORciscoios_xeMatch3.10.6s
ORciscoios_xeMatch3.10.7s
ORciscoios_xeMatch3.10.8as
ORciscoios_xeMatch3.10.8s
ORciscoios_xeMatch3.10.9s
ORciscoios_xeMatch3.10.10s
ORciscoios_xeMatch3.11.0s
ORciscoios_xeMatch3.11.1s
ORciscoios_xeMatch3.11.2s
ORciscoios_xeMatch3.11.3s
ORciscoios_xeMatch3.11.4s
ORciscoios_xeMatch3.12.0as
ORciscoios_xeMatch3.12.0s
ORciscoios_xeMatch3.12.1s
ORciscoios_xeMatch3.12.2s
ORciscoios_xeMatch3.12.3s
ORciscoios_xeMatch3.12.4s
ORciscoios_xeMatch3.13.0as
ORciscoios_xeMatch3.13.0s
ORciscoios_xeMatch3.13.1s
ORciscoios_xeMatch3.13.2as
ORciscoios_xeMatch3.13.2s
ORciscoios_xeMatch3.13.3s
ORciscoios_xeMatch3.13.4s
ORciscoios_xeMatch3.13.5as
ORciscoios_xeMatch3.13.5s
ORciscoios_xeMatch3.13.6as
ORciscoios_xeMatch3.13.6bs
ORciscoios_xeMatch3.13.6s
ORciscoios_xeMatch3.13.7as
ORciscoios_xeMatch3.13.7s
ORciscoios_xeMatch3.13.8s
ORciscoios_xeMatch3.13.9s
ORciscoios_xeMatch3.13.10s
ORciscoios_xeMatch3.14.0s
ORciscoios_xeMatch3.14.1s
ORciscoios_xeMatch3.14.2s
ORciscoios_xeMatch3.14.3s
ORciscoios_xeMatch3.14.4s
ORciscoios_xeMatch3.15.0s
ORciscoios_xeMatch3.15.1cs
ORciscoios_xeMatch3.15.1s
ORciscoios_xeMatch3.15.1xbs
ORciscoios_xeMatch3.15.2s
ORciscoios_xeMatch3.15.2xbs
ORciscoios_xeMatch3.15.3s
ORciscoios_xeMatch3.15.4s
ORciscoios_xeMatch3.16.0as
ORciscoios_xeMatch3.16.0bs
ORciscoios_xeMatch3.16.0cs
ORciscoios_xeMatch3.16.0s
ORciscoios_xeMatch3.16.1as
ORciscoios_xeMatch3.16.1s
ORciscoios_xeMatch3.16.2as
ORciscoios_xeMatch3.16.2bs
ORciscoios_xeMatch3.16.2s
ORciscoios_xeMatch3.16.3as
ORciscoios_xeMatch3.16.3s
ORciscoios_xeMatch3.16.4as
ORciscoios_xeMatch3.16.4bs
ORciscoios_xeMatch3.16.4cs
ORciscoios_xeMatch3.16.4ds
ORciscoios_xeMatch3.16.4es
ORciscoios_xeMatch3.16.4gs
ORciscoios_xeMatch3.16.4s
ORciscoios_xeMatch3.16.5as
ORciscoios_xeMatch3.16.5bs
ORciscoios_xeMatch3.16.5s
ORciscoios_xeMatch3.16.6bs
ORciscoios_xeMatch3.16.6s
ORciscoios_xeMatch3.16.7as
ORciscoios_xeMatch3.16.7bs
ORciscoios_xeMatch3.16.7s
ORciscoios_xeMatch3.16.8s
ORciscoios_xeMatch3.16.9s
ORciscoios_xeMatch3.16.10as
ORciscoios_xeMatch3.16.10s
ORciscoios_xeMatch3.17.0s
ORciscoios_xeMatch3.17.1as
ORciscoios_xeMatch3.17.1s
ORciscoios_xeMatch3.17.2s
ORciscoios_xeMatch3.17.3s
ORciscoios_xeMatch3.17.4s
ORciscoios_xeMatch3.18.0as
ORciscoios_xeMatch3.18.0s
ORciscoios_xeMatch3.18.0sp
ORciscoios_xeMatch3.18.1asp
ORciscoios_xeMatch3.18.1bsp
ORciscoios_xeMatch3.18.1csp
ORciscoios_xeMatch3.18.1gsp
ORciscoios_xeMatch3.18.1hsp
ORciscoios_xeMatch3.18.1isp
ORciscoios_xeMatch3.18.1s
ORciscoios_xeMatch3.18.1sp
ORciscoios_xeMatch3.18.2asp
ORciscoios_xeMatch3.18.2s
ORciscoios_xeMatch3.18.2sp
ORciscoios_xeMatch3.18.3asp
ORciscoios_xeMatch3.18.3bsp
ORciscoios_xeMatch3.18.3s
ORciscoios_xeMatch3.18.3sp
ORciscoios_xeMatch3.18.4s
ORciscoios_xeMatch3.18.4sp
ORciscoios_xeMatch3.18.5sp
ORciscoios_xeMatch3.18.6sp
ORciscoios_xeMatch3.18.7sp
ORciscoios_xeMatch3.18.8asp
ORciscoios_xeMatch3.18.8sp
ORciscoios_xeMatch16.1.1
ORciscoios_xeMatch16.1.2
ORciscoios_xeMatch16.1.3
ORciscoios_xeMatch16.2.1
ORciscoios_xeMatch16.2.2
ORciscoios_xeMatch16.3.1
ORciscoios_xeMatch16.3.1a
ORciscoios_xeMatch16.3.2
ORciscoios_xeMatch16.3.3
ORciscoios_xeMatch16.3.4
ORciscoios_xeMatch16.3.5
ORciscoios_xeMatch16.3.5b
ORciscoios_xeMatch16.3.6
ORciscoios_xeMatch16.3.7
ORciscoios_xeMatch16.3.8
ORciscoios_xeMatch16.3.9
ORciscoios_xeMatch16.3.10
ORciscoios_xeMatch16.3.11
ORciscoios_xeMatch16.4.1
ORciscoios_xeMatch16.4.2
ORciscoios_xeMatch16.4.3
ORciscoios_xeMatch16.5.1
ORciscoios_xeMatch16.5.1a
ORciscoios_xeMatch16.5.1b
ORciscoios_xeMatch16.5.2
ORciscoios_xeMatch16.5.3
ORciscoios_xeMatch16.6.1
ORciscoios_xeMatch16.6.2
ORciscoios_xeMatch16.6.3
ORciscoios_xeMatch16.6.4
ORciscoios_xeMatch16.6.4a
ORciscoios_xeMatch16.6.4s
ORciscoios_xeMatch16.6.5
ORciscoios_xeMatch16.6.5a
ORciscoios_xeMatch16.6.5b
ORciscoios_xeMatch16.6.6
ORciscoios_xeMatch16.6.7
ORciscoios_xeMatch16.6.7a
ORciscoios_xeMatch16.6.8
ORciscoios_xeMatch16.7.1
ORciscoios_xeMatch16.7.1a
ORciscoios_xeMatch16.7.1b
ORciscoios_xeMatch16.7.2
ORciscoios_xeMatch16.7.3
ORciscoios_xeMatch16.7.4
ORciscoios_xeMatch16.8.1
ORciscoios_xeMatch16.8.1a
ORciscoios_xeMatch16.8.1b
ORciscoios_xeMatch16.8.1c
ORciscoios_xeMatch16.8.1d
ORciscoios_xeMatch16.8.1e
ORciscoios_xeMatch16.8.1s
ORciscoios_xeMatch16.8.2
ORciscoios_xeMatch16.8.3
ORciscoios_xeMatch16.9.1
ORciscoios_xeMatch16.9.1a
ORciscoios_xeMatch16.9.1b
ORciscoios_xeMatch16.9.1c
ORciscoios_xeMatch16.9.1d
ORciscoios_xeMatch16.9.1s
ORciscoios_xeMatch16.9.2
ORciscoios_xeMatch16.9.2a
ORciscoios_xeMatch16.9.2s
ORciscoios_xeMatch16.9.3
ORciscoios_xeMatch16.9.3a
ORciscoios_xeMatch16.9.3h
ORciscoios_xeMatch16.9.3s
ORciscoios_xeMatch16.9.4
ORciscoios_xeMatch16.9.4c
ORciscoios_xeMatch16.9.5
ORciscoios_xeMatch16.9.5f
ORciscoios_xeMatch16.9.6
ORciscoios_xeMatch16.10.1
ORciscoios_xeMatch16.10.1a
ORciscoios_xeMatch16.10.1b
ORciscoios_xeMatch16.10.1c
ORciscoios_xeMatch16.10.1d
ORciscoios_xeMatch16.10.1e
ORciscoios_xeMatch16.10.1f
ORciscoios_xeMatch16.10.1g
ORciscoios_xeMatch16.10.1s
ORciscoios_xeMatch16.10.2
ORciscoios_xeMatch16.10.3
ORciscoios_xeMatch16.11.1
ORciscoios_xeMatch16.11.1a
ORciscoios_xeMatch16.11.1b
ORciscoios_xeMatch16.11.1c
ORciscoios_xeMatch16.11.1s
ORciscoios_xeMatch16.11.2
ORciscoios_xeMatch16.12.1
ORciscoios_xeMatch16.12.1a
ORciscoios_xeMatch16.12.1c
ORciscoios_xeMatch16.12.1s
ORciscoios_xeMatch16.12.1t
ORciscoios_xeMatch16.12.1w
ORciscoios_xeMatch16.12.1x
ORciscoios_xeMatch16.12.1y
ORciscoios_xeMatch16.12.1z
ORciscoios_xeMatch16.12.1z1
ORciscoios_xeMatch16.12.1za
ORciscoios_xeMatch16.12.2
ORciscoios_xeMatch16.12.2a
ORciscoios_xeMatch16.12.2s
ORciscoios_xeMatch16.12.2t
ORciscoios_xeMatch16.12.3
ORciscoios_xeMatch16.12.3a
ORciscoios_xeMatch16.12.3s
ORciscoios_xeMatch16.12.4
ORciscoios_xeMatch16.12.4a
ORciscoios_xeMatch17.1.1
ORciscoios_xeMatch17.1.1a
ORciscoios_xeMatch17.1.1s
ORciscoios_xeMatch17.1.1t
ORciscoios_xeMatch17.1.2
ORciscoios_xeMatch17.2.1
ORciscoios_xeMatch17.2.1a
ORciscoios_xeMatch17.2.1r
ORciscoios_xeMatch17.2.1v
ORciscoios_xeMatch17.2.2
ORciscoios_xeMatch17.2.3
ORciscoios_xeMatch17.3.1
ORciscoios_xeMatch17.3.1a
ORciscoios_xeMatch17.3.1w
CNA Affected
[
{
"product": "Cisco IOS XE Software ",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]Social References
More
Related
nessus
nessus
prion
prion
Design/Logic Flaw
2021-03-24 20:15:00
cisco
cisco
nvd
nvd
CVE-2021-1446
2021-03-24 20:15:15
cvelist
cvelist
ics
ics
Rockwell Automation Stratix Devices Containing Cisco IOS
2022-10-27 12:00:00
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
48.7%
Related for CVE-2021-1446