CVE-2021-1590: cisco cisco nx-os software Out-of-bounds Write

Vulnerability summary

CVE-2021-1590 is a medium (CVSS 5.3) Out-of-bounds Write vulnerability in cisco cisco nx-os software. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.1% of scored vulnerabilities.

Timeline

1. 25-08-2021
   PublishedVulnerability first disclosed.
2. 07-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service (DoS) condition. This vulnerability is due to a logic error in the implementation of the system login block-for command when an attack is detected and acted upon. An attacker could exploit this vulnerability by performing a brute-force login attack on an affected device. A successful exploit could allow the attacker to cause a login process to reload, which could result in a delay during authentication to the affected device.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.