CVE-2021-1387
Last modified
CVE-2021-1387 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that are destined to an affected device. EPSS estimates a 1.37% chance of exploitation in the next 30 days.
Description
A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that are destined to an affected device. An attacker could exploit this vulnerability by sending multiple crafted IPv6 packets to an affected device. A successful exploit could cause the network stack to run out of available buffers, impairing operations of control plane and management plane protocols and resulting in a DoS condition. Manual intervention would be required to restore normal operations on the affected device. For more information about the impact of this vulnerability, see the Details section of this advisory.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Computing System | >= 4.0, < 4.0\(4k\) |
| Cisco | Unified Computing System | >= 4.1, < 4.1\(1e\) |
| Cisco | Nx-Os | 7.0\(0\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(1\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(2\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(3\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(4\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(4\)n1\(1a\) |
| Cisco | Nx-Os | 7.0\(5\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(5\)n1\(1a\) |
| Cisco | Nx-Os | 7.0\(6\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(6\)n1\(2s\) |
| Cisco | Nx-Os | 7.0\(6\)n1\(3s\) |
| Cisco | Nx-Os | 7.0\(6\)n1\(4s\) |
| Cisco | Nx-Os | 7.0\(7\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(7\)n1\(1a\) |
| Cisco | Nx-Os | 7.0\(7\)n1\(1b\) |
| Cisco | Nx-Os | 7.0\(8\)n1\(1\) |
| Cisco | Nx-Os | 7.0\(8\)n1\(1a\) |
| Cisco | Nx-Os | 7.1\(0\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(0\)n1\(1a\) |
| Cisco | Nx-Os | 7.1\(0\)n1\(1b\) |
| Cisco | Nx-Os | 7.1\(1\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(1\)n1\(1a\) |
| Cisco | Nx-Os | 7.1\(2\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(2\)n1\(1a\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(2\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(2a\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(3\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(4\) |
| Cisco | Nx-Os | 7.1\(3\)n1\(5\) |
| Cisco | Nx-Os | 7.1\(4\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(4\)n1\(1a\) |
| Cisco | Nx-Os | 7.1\(4\)n1\(1c\) |
| Cisco | Nx-Os | 7.1\(4\)n1\(1d\) |
| Cisco | Nx-Os | 7.1\(5\)n1\(1\) |
| Cisco | Nx-Os | 7.1\(5\)n1\(1b\) |
| Cisco | Nx-Os | 7.2\(0\)n1\(1\) |
| Cisco | Nx-Os | 7.2\(1\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(0\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(0\)n1\(1a\) |
| Cisco | Nx-Os | 7.3\(0\)n1\(1b\) |
| Cisco | Nx-Os | 7.3\(1\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(2\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(2\)n1\(1b\) |
| Cisco | Nx-Os | 7.3\(2\)n1\(1c\) |
| Cisco | Nx-Os | 7.3\(3\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(4\)n1\(1\) |
| Cisco | Nx-Os | 7.3\(4\)n1\(1a\) |
Showing 50 of 241 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-1387?
How severe is CVE-2021-1387?
How do I fix CVE-2021-1387?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-1381A vulnerability in Cisco IOS XE Software could allow an auth…6.1
- CVE-2021-1382A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…6.7
- CVE-2021-1383Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN S…6.7
- CVE-2021-1384A vulnerability in Cisco IOx application hosting environment…7.2
- CVE-2021-1385A vulnerability in the Cisco IOx application hosting environ…6.5
- CVE-2021-1386A vulnerability in the dynamic link library (DLL) loading me…7.8
- CVE-2021-1388A vulnerability in an API endpoint of Cisco ACI Multi-Site O…10
- CVE-2021-1389A vulnerability in the IPv6 traffic processing of Cisco IOS …6.5
- CVE-2021-1390A vulnerability in one of the diagnostic test CLI commands o…6.7
- CVE-2021-1391A vulnerability in the dragonite debugger of Cisco IOS XE So…6.7
- CVE-2021-1392A vulnerability in the CLI command permissions of Cisco IOS …7.8
- CVE-2021-1393Multiple vulnerabilities in Cisco Application Services Engin…9.8
Are you affected by CVE-2021-1387?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST