PT-2021-2174 · Cisco · Cisco Nx-Os+1

Published 2021-02-24 · Updated 2021-03-03 · CVE-2021-1229

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description The issue is related to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet, leading to a slow system memory leak and potentially causing a denial of service (DoS) condition. An attacker could exploit this by sending crafted ICMPv6 packets to a local IPv6 address on a targeted device, causing the ICMPv6 process to run out of system memory and stop processing traffic. This could result in the device dropping all ICMPv6 packets and causing traffic instability. Restoring device functionality would require a device reboot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2021-01081

CVE-2021-1229

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-icmpv6-dos-YD55jVCq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1229 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1229 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01081 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-icmpv6-dos-YD55jVCq · Vendor Advisory
• https://t.me/cibsecurity/24111 · Telegram Post
• https://t.me/cvenotify/10452 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021022519 · Note