CVE-2021-1587

Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability

Severity Score

8.6

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific packets with a Transparent Interconnection of Lots of Links (TRILL) OAM EtherType. An attacker could exploit this vulnerability by sending crafted packets, including the TRILL OAM EtherType of 0x8902, to a device that is part of a VXLAN Ethernet VPN (EVPN) fabric. A successful exploit could allow the attacker to cause an affected device to experience high CPU usage and consume excessive system resources, which may result in overall control plane instability and cause the affected device to reload. Note: The NGOAM feature is disabled by default.

Una vulnerabilidad en la funcionalidad Operation, Administration, and Maintenance (OAM) de VXLAN del Software Cisco NX-OS, conocida como NGOAM, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad es debido al manejo inapropiado de paquetes específicos con un EtherType OAM de Interconexión Transparente de Lotes de Enlaces (TRILL). Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes diseñados, incluyendo el TRILL OAM EtherType de 0x8902, a un dispositivo que forma parte de un tejido VXLAN Ethernet VPN (EVPN). Una explotación con éxito podría permitir al atacante causar que un dispositivo afectado experimente un alto uso de la CPU y consuma excesivos recursos del sistema, lo que puede resultar en una inestabilidad general del plano de control y causar que el dispositivo afectado se recargue. Nota: La función NGOAM está deshabilitada por defecto.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2020-11-13 CVE Reserved
2021-08-25 CVE Published
2024-05-10 EPSS Updated
2024-11-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-115: Misinterpretation of Input
CWE-436: Interpretation Conflict

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ngoam-dos-LTDb9Hv	2023-11-07

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3000 Search vendor "Cisco" for product "Nexus 3000"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3048 Search vendor "Cisco" for product "Nexus 3048"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 31108pc-v Search vendor "Cisco" for product "Nexus 31108pc-v"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 31108tc-v Search vendor "Cisco" for product "Nexus 31108tc-v"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 31128pq Search vendor "Cisco" for product "Nexus 31128pq"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3132c-z Search vendor "Cisco" for product "Nexus 3132c-z"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3132q-v Search vendor "Cisco" for product "Nexus 3132q-v"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3132q-x\/3132q-xl Search vendor "Cisco" for product "Nexus 3132q-x\/3132q-xl"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3164q Search vendor "Cisco" for product "Nexus 3164q"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3172pq\/pq-xl Search vendor "Cisco" for product "Nexus 3172pq\/pq-xl"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3172tq-xl Search vendor "Cisco" for product "Nexus 3172tq-xl"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3232c Search vendor "Cisco" for product "Nexus 3232c"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3264c-e Search vendor "Cisco" for product "Nexus 3264c-e"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3264q Search vendor "Cisco" for product "Nexus 3264q"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3408-s Search vendor "Cisco" for product "Nexus 3408-s"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 34180yc Search vendor "Cisco" for product "Nexus 34180yc"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3432d-s Search vendor "Cisco" for product "Nexus 3432d-s"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3464c Search vendor "Cisco" for product "Nexus 3464c"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3524-x\/xl Search vendor "Cisco" for product "Nexus 3524-x\/xl"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3548-x\/xl Search vendor "Cisco" for product "Nexus 3548-x\/xl"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 36180yc-r Search vendor "Cisco" for product "Nexus 36180yc-r"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 3636c-r Search vendor "Cisco" for product "Nexus 3636c-r"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9000v Search vendor "Cisco" for product "Nexus 9000v"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 92160yc-x Search vendor "Cisco" for product "Nexus 92160yc-x"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 92300yc Search vendor "Cisco" for product "Nexus 92300yc"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 92304qc Search vendor "Cisco" for product "Nexus 92304qc"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 92348gc-x Search vendor "Cisco" for product "Nexus 92348gc-x"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9236c Search vendor "Cisco" for product "Nexus 9236c"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9272q Search vendor "Cisco" for product "Nexus 9272q"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93108tc-ex Search vendor "Cisco" for product "Nexus 93108tc-ex"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93108tc-ex-24 Search vendor "Cisco" for product "Nexus 93108tc-ex-24"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93108tc-fx Search vendor "Cisco" for product "Nexus 93108tc-fx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93108tc-fx-24 Search vendor "Cisco" for product "Nexus 93108tc-fx-24"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93108tc-fx3p Search vendor "Cisco" for product "Nexus 93108tc-fx3p"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93120tx Search vendor "Cisco" for product "Nexus 93120tx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93128tx Search vendor "Cisco" for product "Nexus 93128tx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9316d-gx Search vendor "Cisco" for product "Nexus 9316d-gx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180lc-ex Search vendor "Cisco" for product "Nexus 93180lc-ex"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-ex Search vendor "Cisco" for product "Nexus 93180yc-ex"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-ex-24 Search vendor "Cisco" for product "Nexus 93180yc-ex-24"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-fx Search vendor "Cisco" for product "Nexus 93180yc-fx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-fx-24 Search vendor "Cisco" for product "Nexus 93180yc-fx-24"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-fx3 Search vendor "Cisco" for product "Nexus 93180yc-fx3"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93180yc-fx3s Search vendor "Cisco" for product "Nexus 93180yc-fx3s"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93216tc-fx2 Search vendor "Cisco" for product "Nexus 93216tc-fx2"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93240yc-fx2 Search vendor "Cisco" for product "Nexus 93240yc-fx2"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9332c Search vendor "Cisco" for product "Nexus 9332c"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9332pq Search vendor "Cisco" for product "Nexus 9332pq"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93360yc-fx2 Search vendor "Cisco" for product "Nexus 93360yc-fx2"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9336c-fx2 Search vendor "Cisco" for product "Nexus 9336c-fx2"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9336c-fx2-e Search vendor "Cisco" for product "Nexus 9336c-fx2-e"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9348gc-fxp Search vendor "Cisco" for product "Nexus 9348gc-fxp"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 93600cd-gx Search vendor "Cisco" for product "Nexus 93600cd-gx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9364c Search vendor "Cisco" for product "Nexus 9364c"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9364c-gx Search vendor "Cisco" for product "Nexus 9364c-gx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9372px Search vendor "Cisco" for product "Nexus 9372px"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9372px-e Search vendor "Cisco" for product "Nexus 9372px-e"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9372tx Search vendor "Cisco" for product "Nexus 9372tx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9372tx-e Search vendor "Cisco" for product "Nexus 9372tx-e"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9396px Search vendor "Cisco" for product "Nexus 9396px"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9396tx Search vendor "Cisco" for product "Nexus 9396tx"	-	-	Safe
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 9508 Search vendor "Cisco" for product "Nexus 9508"	-	-	Safe