CVE-2021-26928: nic bird
Vulnerability summary
CVE-2021-26928 is a medium (CVSS 6.8) vulnerability in nic bird. EPSS estimates a 1.01% chance of exploitation in the next 30 days, higher than 62.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 04-06-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configurations, as well as products of other vendors) may have been susceptible to route redirection for Denial of Service and/or Information Disclosure. NOTE: a researcher has asserted that the behavior is within Tigera’s area of responsibility; however, Tigera disagrees
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST6.8MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
1.01%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
0.00 pp
From 1.01% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (cyberark.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Nic1 product
- bird≤ 2.0.7
1 vendor · 1 product