Improper access control in Cisco Nexus 9000 Series Switches in ACI Mode - CVE-2021-1228
Published: February 25, 2021
Vulnerability identifier: #VU50938
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1228
CWE-ID: CWE-284
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to insufficient security requirements during the Link Layer Discovery Protocol (LLDP) setup phase of the infrastructure VLAN. A remote attacker on the local network can send a specially crafted LLDP packet and make unauthorized connections to Cisco Application Policy Infrastructure Controller (APIC) services or join other host endpoints.
Affected software
Cisco Nexus 9000 Series Switches in ACI Mode
How to mitigate CVE-2021-1228
Install updates from vendor's website.
Cisco Nexus 9000 Series Switches in ACI Mode - addressed in versions 14.2.5l, 14.2.5n, 14.2.6d, 14.2.6g, 14.2.6h, 15.1.1h, 15.1.2e, 15.1.3e