4.7

CVE-2021-1231: cisco cisco nx-os system software in aci mode Improper Access Control

CVSS: 4.7v3.1MediumModified
Published 24-02-2021Last modified 08-11-2024
Open JSON

Vulnerability summary

CVE-2021-1231 is a medium (CVSS 4.7) Improper Access Control vulnerability in cisco cisco nx-os system software in aci mode. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.7% of scored vulnerabilities.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
4.7/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 24-02-2021
    PublishedVulnerability first disclosed.
  2. 08-11-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) interface. This vulnerability is due to incomplete validation of the source of a received LLDP packet. An attacker could exploit this vulnerability by sending a crafted LLDP packet on an SFP interface to an affected device. A successful exploit could allow the attacker to disable switching on the SFP interface, which could disrupt network traffic.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

0.00 pp

From 0.25% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco2 products
  • cisco nx-os system software in aci moden/a
  • nx-os11.0\(1b\) | 11.0\(1c\) | 11.0\(1d\) | 11.0\(1e\) | 11.0\(2j\) | 11.0\(2m\) | 11.0\(3f\) | 11.0\(3i\) | 11.0\(3k\) | 11.0\(3n\) | 11.0\(3o\) | 11.0\(4g\) | 11.0\(4h\) | 11.0\(4o\) | 11.0\(4q\) | 11.1\(1j\) | 11.1\(1o\) | 11.1\(1r\) | 11.1\(1s\) | 11.1\(2h\) | 11.1\(2i\) | 11.1\(3f\) | 11.1\(4e\) | 11.1\(4f\) | 11.1\(4g\) | 11.1\(4i\) | 11.1\(4l\) | 11.1\(4m\) | 11.2\(1i\) | 11.2\(1k\) | 11.2\(1m\) | 11.2\(2g\) | 11.2\(2h\) | 11.2\(2i\) | 11.2\(2j\) | 11.2\(3c\) | 11.2\(3e\) | 11.2\(3h\) | 11.2\(3m\) | 11.3\(1g\) | 11.3\(1h\) | 11.3\(1i\) | 11.3\(1j\) | 11.3\(2f\) | 11.3\(2h\) | 11.3\(2i\) | 11.3\(2j\) | 11.3\(2k\) | 12.0\(1m\) | 12.0\(1n\) | 12.0\(1o\) | 12.0\(1p\) | 12.0\(1q\) | 12.0\(1r\) | 12.0\(2f\) | 12.0\(2g\) | 12.0\(2h\) | 12.0\(2l\) | 12.0\(2m\) | 12.0\(2n\) | 12.0\(2o\) | 12.1\(1h\) | 12.1\(1i\) | 12.1\(2e\) | 12.1\(2g\) | 12.1\(2k\) | 12.1\(3g\) | 12.1\(3h\) | 12.1\(3j\) | 12.1\(4a\) | 12.2\(1k\) | 12.2\(1n\) | 12.2\(1o\) | 12.2\(2e\) | 12.2\(2f\) | 12.2\(2i\) | 12.2\(2j\) | 12.2\(2k\) | 12.2\(2q\) | 12.2\(3j\) | 12.2\(3p\) | 12.2\(3r\) | 12.2\(3s\) | 12.2\(3t\) | 12.2\(4f\) | 12.2\(4p\) | 12.2\(4q\) | 12.2\(4r\) | 12.3\(1e\) | 12.3\(1f\) | 12.3\(1i\) | 12.3\(1l\) | 12.3\(1o\) | 12.3\(1p\) | 13.0\(1k\) | 13.0\(2h\) | 13.0\(2k\) | 13.0\(2n\) | 13.1\(1i\) | 13.1\(2m\) | 13.1\(2o\) | 13.1\(2p\) | 13.1\(2q\) | 13.1\(2s\) | 13.1\(2t\) | 13.1\(2u\) | 13.1\(2v\) | 13.2\(1l\) | 13.2\(1m\) | 13.2\(2l\) | 13.2\(2o\) | 13.2\(3i\) | 13.2\(3j\) | 13.2\(3n\) | 13.2\(3o\) | 13.2\(3r\) | 13.2\(3s\) | 13.2\(4d\) | 13.2\(4e\) | 13.2\(5d\) | 13.2\(5e\) | 13.2\(5f\) | 13.2\(6i\) | 13.2\(7f\) | 13.2\(7k\) | 13.2\(8d\) | 13.2\(9b\) | 13.2\(9f\) | 13.2\(9h\) | 13.2\(41d\) | 14.0\(1h\) | 14.0\(2c\) | 14.0\(3c\) | 14.0\(3d\) | 14.1\(1i\) | 14.1\(1j\) | 14.1\(1k\) | 14.1\(1l\) | 14.1\(2g\) | 14.1\(2m\) | 14.1\(2o\) | 14.1\(2s\) | 14.1\(2u\) | 14.1\(2w\) | 14.1\(2x\) | 14.2\(1i\) | 14.2\(1j\) | 14.2\(1l\) | 14.2\(2e\) | 14.2\(2f\) | 14.2\(2g\) | 14.2\(3j\) | 14.2\(3l\) | 14.2\(3n\) | 14.2\(3q\) | 14.2\(4i\) | 14.2\(4k\) | 14.2\(4o\) | 14.2\(4p\) | 14.2\(5k\) | 15.0\(1k\) | 15.0\(1l\) | 15.0\(2e\) | 15.0\(2h\)

1 vendor · 2 products

References

1 links