Lucene search

[email protected]CVE-2021-34714

HistorySep 23, 2021 - 3:15 a.m.

CVE-2021-34714

2021-09-2303:15:18

CWE-20

[email protected]

web.nvd.nist.gov

cve-2021-34714

vulnerability

udld

cisco

fxos software

ios software

ios xe software

ios xr software

nx-os software

dos

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.1%

JSON

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.

Affected configurations

NVD

Node

ciscofirepower_4100Match-

ciscofirepower_4110Match-

ciscofirepower_4112Match-

ciscofirepower_4115Match-

ciscofirepower_4120Match-

ciscofirepower_4125Match-

ciscofirepower_4140Match-

ciscofirepower_4145Match-

ciscofirepower_4150Match-

ciscofirepower_9300Match-

ciscofirepower_9300_sm-24Match-

ciscofirepower_9300_sm-36Match-

ciscofirepower_9300_sm-40Match-

ciscofirepower_9300_sm-44Match-

ciscofirepower_9300_sm-44_x_3Match-

ciscofirepower_9300_sm-48Match-

ciscofirepower_9300_sm-56Match-

ciscofirepower_9300_sm-56_x_3Match-

ciscofirepower_9300_with_1_sm-24_moduleMatch-

ciscofirepower_9300_with_1_sm-36_moduleMatch-

ciscofirepower_9300_with_1_sm-44_moduleMatch-

ciscofirepower_9300_with_3_sm-44_moduleMatch-

AND

ciscofxosRange2.2–2.2.2.148

ciscofxosRange2.3–2.3.1.216

ciscofxosRange2.4–2.4.1.273

ciscofxosRange2.6–2.6.1.224

ciscofxosRange2.7–2.7.1.143

ciscofxosRange2.8–2.8.1.143

ciscofxosRange2.9–2.9.1.135

Node

ciscomds_9000Match-

ciscomds_9100Match-

ciscomds_9132tMatch-

ciscomds_9134Match-

ciscomds_9140Match-

ciscomds_9148Match-

ciscomds_9148sMatch-

ciscomds_9148tMatch-

ciscomds_9200Match-

ciscomds_9216Match-

ciscomds_9216aMatch-

ciscomds_9216iMatch-

ciscomds_9222iMatch-

ciscomds_9250iMatch-

ciscomds_9396sMatch-

ciscomds_9396tMatch-

ciscomds_9500Match-

ciscomds_9506Match-

ciscomds_9509Match-

ciscomds_9513Match-

ciscomds_9700Match-

ciscomds_9706Match-

ciscomds_9710Match-

ciscomds_9718Match-

cisconexus_7000Match-

cisconexus_7000_10-slotMatch-

cisconexus_7000_18-slotMatch-

cisconexus_7000_4-slotMatch-

cisconexus_7000_9-slotMatch-

cisconexus_7000_supervisor_1Match-

cisconexus_7000_supervisor_2Match-

cisconexus_7000_supervisor_2eMatch-

cisconexus_7004Match-

cisconexus_7009Match-

cisconexus_7010Match-

cisconexus_7018Match-

cisconexus_7700Match-

cisconexus_7700_10-slotMatch-

cisconexus_7700_18-slotMatch-

cisconexus_7700_2-slotMatch-

cisconexus_7700_6-slotMatch-

cisconexus_7700_supervisor_2eMatch-

cisconexus_7700_supervisor_3eMatch-

cisconexus_7702Match-

cisconexus_7706Match-

cisconexus_7710Match-

cisconexus_7718Match-

AND

ciscofirepower_extensible_operating_systemRange≤8.4\(3.115\)

ciscoiosRange≤8.4\(3.115\)

ciscoios_xeRange≤8.4\(3.115\)

ciscoios_xrRange≤8.4\(3.115\)

cisconx-osRange≤8.4\(3.115\)

Node

cisconexus_3000Match-

cisconexus_3016Match-

cisconexus_3016qMatch-

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3064tMatch-

cisconexus_3064xMatch-

cisconexus_3100Match-

cisconexus_3100-vMatch-

cisconexus_3100-zMatch-

cisconexus_3100vMatch-

cisconexus_31108pc-vMatch-

cisconexus_31108pv-vMatch-

cisconexus_31108tc-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-vMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-x\/3132q-xlMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172Match-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172pq\/pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3172tq-xlMatch-

cisconexus_3200Match-

cisconexus_3232cMatch-

cisconexus_3232c_Match-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_3400Match-

cisconexus_3408-sMatch-

cisconexus_34180ycMatch-

cisconexus_34200yc-smMatch-

cisconexus_3432d-sMatch-

cisconexus_3464cMatch-

cisconexus_3500Match-

cisconexus_3500_platformMatch-

cisconexus_3524Match-

cisconexus_3524-xMatch-

cisconexus_3524-x\/xlMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-x\/xlMatch-

cisconexus_3548-xlMatch-

cisconexus_3600Match-

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

cisconexus_9000Match-

cisconexus_9000_in_aci_modeMatch-

cisconexus_9000_in_standaloneMatch-

cisconexus_9000_in_standalone_nx-os_modeMatch-

cisconexus_9000vMatch-

cisconexus_9200Match-

cisconexus_92160yc-xMatch-

cisconexus_9221cMatch-

cisconexus_92300ycMatch-

cisconexus_92304qcMatch-

cisconexus_92348gc-xMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_9300Match-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-ex-24Match-

cisconexus_93108tc-fxMatch-

cisconexus_93108tc-fx-24Match-

cisconexus_93108tc-fx3pMatch-

cisconexus_93120txMatch-

cisconexus_93128Match-

cisconexus_93128txMatch-

cisconexus_9316d-gxMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180tc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-ex-24Match-

cisconexus_93180yc-fxMatch-

cisconexus_93180yc-fx-24Match-

cisconexus_93180yc-fx3Match-

cisconexus_93180yc-fx3sMatch-

cisconexus_93216tc-fx2Match-

cisconexus_93240yc-fx2Match-

cisconexus_9332cMatch-

cisconexus_9332pqMatch-

cisconexus_93360yc-fx2Match-

cisconexus_9336c-fx2Match-

cisconexus_9336c-fx2-eMatch-

cisconexus_9336pqMatch-

cisconexus_9336pq_aci_spineMatch-

cisconexus_9348gc-fxpMatch-

cisconexus_93600cd-gxMatch-

cisconexus_9364cMatch-

cisconexus_9364c-gxMatch-

cisconexus_9372pxMatch-

cisconexus_9372px-eMatch-

cisconexus_9372txMatch-

cisconexus_9372tx-eMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9500Match-

cisconexus_9500_supervisor_aMatch-

cisconexus_9500_supervisor_a\+Match-

cisconexus_9500_supervisor_bMatch-

cisconexus_9500_supervisor_b\+Match-

cisconexus_9500rMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

AND

ciscofirepower_extensible_operating_systemRange≤7.0\(3\)i7\(9\)

ciscoiosRange≤7.0\(3\)i7\(9\)

ciscoios_xeRange≤7.0\(3\)i7\(9\)

ciscoios_xrRange≤7.0\(3\)i7\(9\)

cisconx-osRange≤7.0\(3\)i7\(9\)

Node

cisconexus_5000Match-

cisconexus_5010Match-

cisconexus_5020Match-

cisconexus_5500Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_5600Match-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5672up-16gMatch-

cisconexus_5696qMatch-

cisconexus_6000Match-

cisconexus_6001Match-

cisconexus_6001pMatch-

cisconexus_6001tMatch-

cisconexus_6004Match-

cisconexus_6004xMatch-

AND

ciscofirepower_extensible_operating_systemRange≤7.3\(8\)n1\(1\)

ciscoiosRange≤7.3\(8\)n1\(1\)

ciscoios_xeRange≤7.3\(8\)n1\(1\)

ciscoios_xrRange≤7.3\(8\)n1\(1\)

cisconx-osRange≤7.3\(8\)n1\(1\)

Node

ciscoucs_6200Match-

ciscoucs_6248_up_fabric_interconnectMatch-

ciscoucs_6248upMatch-

ciscoucs_6296_up_fabric_interconnectMatch-

ciscoucs_6296upMatch-

ciscoucs_6300Match-

ciscoucs_6324Match-

ciscoucs_6324_fabric_interconnectMatch-

ciscoucs_6332Match-

ciscoucs_6332-16upMatch-

ciscoucs_6332-16up_fabric_interconnectMatch-

ciscoucs_6332_fabric_interconnectMatch-

AND

ciscofirepower_extensible_operating_systemRange≤3.2\(3o\)a

ciscoiosRange≤3.2\(3o\)a

ciscoios_xeRange≤3.2\(3o\)a

ciscoios_xrRange≤3.2\(3o\)a

cisconx-osRange≤3.2\(3o\)a

Node

ciscoucs_6400Match-

ciscoucs_6454Match-

AND

ciscofirepower_extensible_operating_systemRange≤4.1\(1a\)a

ciscoiosRange≤4.1\(1a\)a

ciscoios_xeRange≤4.1\(1a\)a

ciscoios_xrRange≤4.1\(1a\)a

cisconx-osRange≤3.2\(3o\)a

CPENameOperatorVersion
cisco:fxoscisco fxoslt2.2.2.148
cisco:fxoscisco fxoslt2.3.1.216
cisco:fxoscisco fxoslt2.4.1.273
cisco:fxoscisco fxoslt2.6.1.224
cisco:fxoscisco fxoslt2.7.1.143
cisco:fxoscisco fxoslt2.8.1.143
cisco:fxoscisco fxoslt2.9.1.135

CPE	Name	Operator	Version
cisco:fxos	cisco fxos	lt	2.2.2.148
cisco:fxos	cisco fxos	lt	2.3.1.216
cisco:fxos	cisco fxos	lt	2.4.1.273
cisco:fxos	cisco fxos	lt	2.6.1.224
cisco:fxos	cisco fxos	lt	2.7.1.143
cisco:fxos	cisco fxos	lt	2.8.1.143
cisco:fxos	cisco fxos	lt	2.9.1.135

CNA Affected

[
  {
    "product": "Cisco IOS ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

7.4 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

25.1%

JSON

Related for CVE-2021-34714

cvelist1 prion1 nvd1 nessus1 cisco1