CVE-2021-1230

A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.

• CWE-233

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSKVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSKVendor Advisory

Published

Feb 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1224Multiple Cisco products are affected by a vulnerability with…5.3
• CVE-2021-1225Multiple vulnerabilities in the web-based management interfa…9.1
• CVE-2021-1226A vulnerability in the audit logging component of Cisco Unif…6.5
• CVE-2021-1227A vulnerability in the NX-API feature of Cisco NX-OS Softwar…8.1
• CVE-2021-1228A vulnerability in the fabric infrastructure VLAN connection…6.5
• CVE-2021-1229A vulnerability in ICMP Version 6 (ICMPv6) processing in Cis…5.3
• CVE-2021-1231A vulnerability in the Link Layer Discovery Protocol (LLDP) …4.7
• CVE-2021-1232A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1233A vulnerability in the CLI of Cisco SD-WAN Software could al…4.4
• CVE-2021-1234A vulnerability in the cluster management interface of Cisco…5.3
• CVE-2021-1235A vulnerability in the CLI of Cisco SD-WAN vManage Software …5.5
• CVE-2021-1236Multiple Cisco products are affected by a vulnerability in t…5.3