CVE-2021-1367: Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability
Published Feb 24, 2021
·Updated
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop, resulting in a DoS condition.
Affected Software
43 affected components
Cisco NX-OS=9.3\(5\)
Cisco Nexus 9000v Switch
Cisco Nexus 92160yc-x Switch
Cisco Nexus 92300yc Switch
Cisco Nexus 92304qc Switch
Cisco Nexus 92348gc-x Switch
Cisco Nexus 9236c Switch
Cisco Nexus 9272q Switch
Cisco Nexus 93108tc-ex-24 Switch
Cisco Nexus 93108tc-ex Switch
Cisco Nexus 93108tc-fx-24
Cisco Nexus 93108tc-fx Switch
Cisco Nexus 93120tx
Cisco Nexus 93128tx
Cisco Nexus 9316d-gx
Cisco Nexus 93180lc-ex
Cisco Nexus 93180yc-ex
Cisco Nexus 93180yc-ex-24
Cisco Nexus 93180yc-fx
Cisco Nexus 93180yc-fx-24
Cisco Nexus 93180yc-fx3
Cisco Nexus 93180yc-fx3s
Cisco Nexus 93216tc-fx2
Cisco Nexus 93240yc-fx2
Cisco Nexus 9332c
Cisco Nexus 9332pq
Cisco Nexus 93360yc-fx2
Cisco Nexus 9336c-fx2
Cisco Nexus 9336c-fx2-e
Cisco Nexus 9336pq
Cisco Nexus 9348gc-fxp
Cisco Nexus 93600cd-gx
Cisco Nexus 9364c
Cisco Nexus 9364c-gx
Cisco Nexus 9372px
Cisco Nexus 9372px-e
Cisco Nexus 9372tx
Cisco Nexus 9372tx-e
Cisco Nexus 9396px
Cisco Nexus 9396tx
Cisco Nexus 9504
Cisco Nexus 9508
Cisco Nexus 9516
Event History
Feb 24, 2021
CVE Published
via MITRE·07:30 PM
Data Sourced
via MITRE·07:30 PM
DescriptionSeverityWeakness