PT-2021-4742 · Cisco · Cisco Ios Xe

Published 2021-09-22 · Updated 2021-10-05 · CVE-2021-34697

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the Protection Against Distributed Denial of Service Attacks feature could allow an unauthenticated, remote attacker to conduct denial of service (DoS) attacks to or through the affected device. This issue is due to incorrect programming of the half-opened connections limit, TCP SYN flood limit, or TCP SYN cookie features when the features are configured in vulnerable releases of Cisco IOS XE Software. An attacker could exploit this vulnerability by attempting to flood traffic to or through the affected device, potentially initiating a DoS attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2021-05451

CVE-2021-34697

Affected Products

Cisco Ios Xe

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-zbfw-tguGuYq · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-34697 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-zbfw-tguGuYq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34697 · Security Note
• https://bdu.fstec.ru/vul/2021-05451 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021092417 · Note