Buffer overflow in Cisco Systems, Inc products - CVE-2021-1590
Published: August 26, 2021
Vulnerability identifier: #VU56116
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1590
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the implementation of the system login block-for command. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.
Affected software
Cisco NX-OS
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 3000 Series Switches
Cisco Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Cisco Nexus 6000 Series Switches
UCS 6200 Series Fabric Interconnects
UCS 6300 Series Fabric Interconnects
Cisco MDS 9000 Series Multilayer Switches
Cisco Nexus 3000 Series Switches
Cisco Nexus 7000 Series Switches
Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Cisco Nexus 6000 Series Switches
How to mitigate CVE-2021-1590
Install updates from vendor's website.
UCS 6200 Series Fabric Interconnects - addressed in versions 4.0.4m, 4.1.3d
UCS 6300 Series Fabric Interconnects - addressed in versions 4.0.4m, 4.1.3d
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 3000 Series Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 7000 Series Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 9000 Series Switches NX-OS Mode - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Nexus 5500 Platform Switches - update to 7.3.9 N1.1
Nexus 5600 Platform Switches - update to 7.3.9 N1.1
Cisco Nexus 6000 Series Switches - update to 7.3.9 N1.1
UCS 6300 Series Fabric Interconnects - addressed in versions 4.0.4m, 4.1.3d
Cisco MDS 9000 Series Multilayer Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 3000 Series Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 7000 Series Switches - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Cisco Nexus 9000 Series Switches NX-OS Mode - addressed in versions 6.2.25, 7.0.3 F1.1, 7.0.3 I4.1, 7.3.2 D1.1A, 7.3.3 D1.1, 8.1.1b, 8.3.1
Nexus 5500 Platform Switches - update to 7.3.9 N1.1
Nexus 5600 Platform Switches - update to 7.3.9 N1.1
Cisco Nexus 6000 Series Switches - update to 7.3.9 N1.1