Always-Incorrect Control Flow Implementation in Cisco Systems, Inc products - CVE-2021-34767
Published: September 24, 2021
Vulnerability identifier: #VU56859
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-34767
CWE-ID: CWE-670
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of servide (DoS) attack.
The vulnerability exists due to a logic error when processing specific link-local IPv6 traffic. A remote attacker on the local network can send a specially crafted IPv6 packet and cause a denial of service condition on the target system.
Affected software
Cisco IOS XE
Cisco Catalyst 9800 Wireless Controller
Catalyst 9800 Wireless Controllers for Cloud
Cisco Catalyst 9800 Wireless Controller
Catalyst 9800 Wireless Controllers for Cloud
How to mitigate CVE-2021-34767
Install update from vendor's website.