{"schemaVersion":3,"id":"CVE-2021-1230","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.","dates":{"published":"2021-02-24T19:30:30.975Z","modified":"2024-11-08T23:39:28.825Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.6,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.1,"severity":"high","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01528,"percentile":0.74341,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01528},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01476,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01528,"percentile":0.74341}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01528,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01528,"percentile":0.74341}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-233","name":"Improper Handling of Parameters","description":"The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/233.html"}],"affected":[{"vendor":"cisco","product":"cisco nx-os system software in aci mode","name":"Cisco NX-OS System Software in ACI Mode","label":"cisco nx-os system software in aci mode","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"n/a","noFixRecorded":false,"fixedIn":null}],"versionsText":"n/a","eol":null,"hubHref":"/vendor/cisco/cisco_nx-os_system_software_in_aci_mode"},{"vendor":"cisco","product":"nx-os","name":"NX-OS","label":"nx-os","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12.0\\(1m\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(1n\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(1o\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(1p\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(1q\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(1r\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2f\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2g\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2h\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2l\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2m\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2n\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.0\\(2o\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(1h\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(2e\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(2g\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(2k\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(3g\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(3h\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(3j\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.1\\(4a\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(1k\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(1n\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(1o\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2e\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2f\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2i\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2j\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2k\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(2q\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(3j\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(3p\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(3r\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(3s\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(3t\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(4f\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(4p\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(4q\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.2\\(4r\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1e\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1f\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1l\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1o\\)","noFixRecorded":false,"fixedIn":null},{"text":"12.3\\(1p\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.0\\(1k\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.0\\(2h\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.0\\(2k\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.0\\(2n\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2m\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2o\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2p\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2q\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2s\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2t\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2u\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.1\\(2v\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(1l\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(1m\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(2l\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(2o\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3i\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3j\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3n\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3o\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3r\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(3s\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(4d\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(4e\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(5d\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(5e\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(5f\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(6i\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(7f\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(7k\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(8d\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(9b\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(9f\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(9h\\)","noFixRecorded":false,"fixedIn":null},{"text":"13.2\\(41d\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.0\\(1h\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.0\\(2c\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.0\\(3c\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.0\\(3d\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(1j\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(1k\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(1l\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2g\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2m\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2o\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2s\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2u\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2w\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.1\\(2x\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(1j\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(1l\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(2e\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(2f\\)","noFixRecorded":false,"fixedIn":null},{"text":"14.2\\(2g\\)","noFixRecorded":false,"fixedIn":null}],"versionsText":"12.0\\(1m\\) | 12.0\\(1n\\) | 12.0\\(1o\\) | 12.0\\(1p\\) | 12.0\\(1q\\) | 12.0\\(1r\\) | 12.0\\(2f\\) | 12.0\\(2g\\) | 12.0\\(2h\\) | 12.0\\(2l\\) | 12.0\\(2m\\) | 12.0\\(2n\\) | 12.0\\(2o\\) | 12.1\\(1h\\) | 12.1\\(1i\\) | 12.1\\(2e\\) | 12.1\\(2g\\) | 12.1\\(2k\\) | 12.1\\(3g\\) | 12.1\\(3h\\) | 12.1\\(3j\\) | 12.1\\(4a\\) | 12.2\\(1k\\) | 12.2\\(1n\\) | 12.2\\(1o\\) | 12.2\\(2e\\) | 12.2\\(2f\\) | 12.2\\(2i\\) | 12.2\\(2j\\) | 12.2\\(2k\\) | 12.2\\(2q\\) | 12.2\\(3j\\) | 12.2\\(3p\\) | 12.2\\(3r\\) | 12.2\\(3s\\) | 12.2\\(3t\\) | 12.2\\(4f\\) | 12.2\\(4p\\) | 12.2\\(4q\\) | 12.2\\(4r\\) | 12.3\\(1e\\) | 12.3\\(1f\\) | 12.3\\(1i\\) | 12.3\\(1l\\) | 12.3\\(1o\\) | 12.3\\(1p\\) | 13.0\\(1k\\) | 13.0\\(2h\\) | 13.0\\(2k\\) | 13.0\\(2n\\) | 13.1\\(1i\\) | 13.1\\(2m\\) | 13.1\\(2o\\) | 13.1\\(2p\\) | 13.1\\(2q\\) | 13.1\\(2s\\) | 13.1\\(2t\\) | 13.1\\(2u\\) | 13.1\\(2v\\) | 13.2\\(1l\\) | 13.2\\(1m\\) | 13.2\\(2l\\) | 13.2\\(2o\\) | 13.2\\(3i\\) | 13.2\\(3j\\) | 13.2\\(3n\\) | 13.2\\(3o\\) | 13.2\\(3r\\) | 13.2\\(3s\\) | 13.2\\(4d\\) | 13.2\\(4e\\) | 13.2\\(5d\\) | 13.2\\(5e\\) | 13.2\\(5f\\) | 13.2\\(6i\\) | 13.2\\(7f\\) | 13.2\\(7k\\) | 13.2\\(8d\\) | 13.2\\(9b\\) | 13.2\\(9f\\) | 13.2\\(9h\\) | 13.2\\(41d\\) | 14.0\\(1h\\) | 14.0\\(2c\\) | 14.0\\(3c\\) | 14.0\\(3d\\) | 14.1\\(1i\\) | 14.1\\(1j\\) | 14.1\\(1k\\) | 14.1\\(1l\\) | 14.1\\(2g\\) | 14.1\\(2m\\) | 14.1\\(2o\\) | 14.1\\(2s\\) | 14.1\\(2u\\) | 14.1\\(2w\\) | 14.1\\(2x\\) | 14.2\\(1i\\) | 14.2\\(1j\\) | 14.2\\(1l\\) | 14.2\\(2e\\) | 14.2\\(2f\\) | 14.2\\(2g\\)","eol":null,"hubHref":"/vendor/cisco/nx-os"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSK","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSK","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-02-24T19:30:30.975Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-08T23:39:28.825Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:28:40.474Z","stale":false,"partial":false}}