CVE-2021-1312

A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to block TCP listening ports that are used by the health monitor API. This vulnerability only affects customers who use the health monitor API.

• CWE-400

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esc-dos-4Gw6D527Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esc-dos-4Gw6D527Vendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1306A vulnerability in the restricted shell of Cisco Evolved Pro…3.4
• CVE-2021-1307Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1308Multiple vulnerabilities exist in the Link Layer Discovery P…7.4
• CVE-2021-1309Multiple vulnerabilities exist in the Link Layer Discovery P…8.8
• CVE-2021-1310A vulnerability in the web-based management interface of Cis…4.7
• CVE-2021-1311A vulnerability in the reclaim host role feature of Cisco We…5.4
• CVE-2021-1313Multiple vulnerabilities in the ingress packet processing fu…7.5
• CVE-2021-1314Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1315Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1316Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1317Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1318Multiple vulnerabilities in the web-based management interfa…7.2