CVE-2021-34713: Cisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability
A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause the affected line card to reboot. This vulnerability is due to incorrect handling of specific Ethernet frames that cause a spin loop that can make the network processors unresponsive. An attacker could exploit this vulnerability by sending specific types of Ethernet frames on the segment where the affected line cards are attached. A successful exploit could allow the attacker to cause the affected line card to reboot.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Cisco IOS XR Software vulnerability?
The vulnerability ID is CVE-2021-34713.
What is the severity of CVE-2021-34713?
The severity of CVE-2021-34713 is high with a CVSS score of 7.4.
Which Cisco IOS XR Software versions are affected by CVE-2021-34713?
Cisco IOS XR Software versions 6.4 through 6.6.3, 6.7 through 6.7.1, 7.0 through 7.0.2, and 7.1 through 7.1.1 are affected by CVE-2021-34713.
How can an attacker exploit CVE-2021-34713?
An unauthenticated, adjacent attacker can exploit CVE-2021-34713 by sending specific Ethernet frames to the affected line card, causing it to reboot.
Where can I find more information about CVE-2021-34713?
You can find more information about CVE-2021-34713 in the Cisco Security Advisory at https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-npspin-QYpwdhFD.