CVE-2021-34714

Published: Sep 23, 2021Modified: Nov 21, 2024

7.4

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 4.0

Source: NVD

Description

A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.

Affected (31)

Products: Cisco: Fxos, Firepower Extensible Operating System, Ios, Ios Xe, Ios Xr, Nx Os

Cisco

6 products

Fxos

Firepower Extensible Operating System

Configuration A

7 vulnerable · 22 platform

Vulnerable Software	Affected Versions
Cisco Fxos	From 2.2 to 2.2.2.148
Cisco Fxos	From 2.3 to 2.3.1.216
Cisco Fxos	From 2.4 to 2.4.1.273
Cisco Fxos	From 2.6 to 2.6.1.224
Cisco Fxos	From 2.7 to 2.7.1.143
Cisco Fxos	From 2.8 to 2.8.1.143
Cisco Fxos	From 2.9 to 2.9.1.135

Running on/with	Platform Versions
Cisco Firepower 4100	All versions
Cisco Firepower 4110	All versions
Cisco Firepower 4112	All versions
Cisco Firepower 4115	All versions
Cisco Firepower 4120	All versions
Cisco Firepower 4125	All versions
Cisco Firepower 4140	All versions
Cisco Firepower 4145	All versions
Cisco Firepower 4150	All versions
Cisco Firepower 9300	All versions
Cisco Firepower 9300 Sm 24	All versions
Cisco Firepower 9300 Sm 36	All versions
Cisco Firepower 9300 Sm 40	All versions
Cisco Firepower 9300 Sm 44	All versions
Cisco Firepower 9300 Sm 44 X 3	All versions
Cisco Firepower 9300 Sm 48	All versions
Cisco Firepower 9300 Sm 56	All versions
Cisco Firepower 9300 Sm 56 X 3	All versions
Cisco Firepower 9300 With 1 Sm 24 Module	All versions
Cisco Firepower 9300 With 1 Sm 36 Module	All versions
Cisco Firepower 9300 With 1 Sm 44 Module	All versions
Cisco Firepower 9300 With 3 Sm 44 Module	All versions

Configuration B

5 vulnerable · 47 platform

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Up to 8.4\(3.115\)
Cisco Ios	Up to 8.4\(3.115\)
Cisco Ios Xe	Up to 8.4\(3.115\)
Cisco Ios Xr	Up to 8.4\(3.115\)
Cisco Nx Os	Up to 8.4\(3.115\)

Running on/with	Platform Versions
Cisco Mds 9000	All versions
Cisco Mds 9100	All versions
Cisco Mds 9132t	All versions
Cisco Mds 9134	All versions
Cisco Mds 9140	All versions
Cisco Mds 9148	All versions
Cisco Mds 9148s	All versions
Cisco Mds 9148t	All versions
Cisco Mds 9200	All versions
Cisco Mds 9216	All versions
Cisco Mds 9216a	All versions
Cisco Mds 9216i	All versions
Cisco Mds 9222i	All versions
Cisco Mds 9250i	All versions
Cisco Mds 9396s	All versions
Cisco Mds 9396t	All versions
Cisco Mds 9500	All versions
Cisco Mds 9506	All versions
Cisco Mds 9509	All versions
Cisco Mds 9513	All versions
Cisco Mds 9700	All versions
Cisco Mds 9706	All versions
Cisco Mds 9710	All versions
Cisco Mds 9718	All versions
Cisco Nexus 7000	All versions
Cisco Nexus 7000 10 Slot	All versions
Cisco Nexus 7000 18 Slot	All versions
Cisco Nexus 7000 4 Slot	All versions
Cisco Nexus 7000 9 Slot	All versions
Cisco Nexus 7000 Supervisor 1	All versions
Cisco Nexus 7000 Supervisor 2	All versions
Cisco Nexus 7000 Supervisor 2e	All versions
Cisco Nexus 7004	All versions
Cisco Nexus 7009	All versions
Cisco Nexus 7010	All versions
Cisco Nexus 7018	All versions
Cisco Nexus 7700	All versions
Cisco Nexus 7700 10 Slot	All versions
Cisco Nexus 7700 18 Slot	All versions
Cisco Nexus 7700 2 Slot	All versions
Cisco Nexus 7700 6 Slot	All versions
Cisco Nexus 7700 Supervisor 2e	All versions
Cisco Nexus 7700 Supervisor 3e	All versions
Cisco Nexus 7702	All versions
Cisco Nexus 7706	All versions
Cisco Nexus 7710	All versions
Cisco Nexus 7718	All versions

Configuration C

5 vulnerable · 115 platform

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Up to 7.0\(3\)i7\(9\)
Cisco Ios	Up to 7.0\(3\)i7\(9\)
Cisco Ios Xe	Up to 7.0\(3\)i7\(9\)
Cisco Ios Xr	Up to 7.0\(3\)i7\(9\)
Cisco Nx Os	Up to 7.0\(3\)i7\(9\)

Running on/with	Platform Versions
Cisco Nexus 3000	All versions
Cisco Nexus 3016	All versions
Cisco Nexus 3016q	All versions
Cisco Nexus 3048	All versions
Cisco Nexus 3064	All versions
Cisco Nexus 3064 32t	All versions
Cisco Nexus 3064 T	All versions
Cisco Nexus 3064 X	All versions
Cisco Nexus 3064t	All versions
Cisco Nexus 3064x	All versions
Cisco Nexus 3100	All versions
Cisco Nexus 3100 V	All versions
Cisco Nexus 3100 Z	All versions
Cisco Nexus 3100v	All versions
Cisco Nexus 31108pc V	All versions
Cisco Nexus 31108pv V	All versions
Cisco Nexus 31108tc V	All versions
Cisco Nexus 31128pq	All versions
Cisco Nexus 3132c Z	All versions
Cisco Nexus 3132q	All versions
Cisco Nexus 3132q V	All versions
Cisco Nexus 3132q X	All versions
Cisco Nexus 3132q X/3132q Xl	All versions
Cisco Nexus 3132q Xl	All versions
Cisco Nexus 3164q	All versions
Cisco Nexus 3172	All versions
Cisco Nexus 3172pq	All versions
Cisco Nexus 3172pq Xl	All versions
Cisco Nexus 3172pq/pq Xl	All versions
Cisco Nexus 3172tq	All versions
Cisco Nexus 3172tq 32t	All versions
Cisco Nexus 3172tq Xl	All versions
Cisco Nexus 3200	All versions
Cisco Nexus 3232c	All versions
Cisco Nexus 3232c	All versions
Cisco Nexus 3264c E	All versions
Cisco Nexus 3264q	All versions
Cisco Nexus 3400	All versions
Cisco Nexus 3408 S	All versions
Cisco Nexus 34180yc	All versions
Cisco Nexus 34200yc Sm	All versions
Cisco Nexus 3432d S	All versions
Cisco Nexus 3464c	All versions
Cisco Nexus 3500	All versions
Cisco Nexus 3500 Platform	All versions
Cisco Nexus 3524	All versions
Cisco Nexus 3524 X	All versions
Cisco Nexus 3524 X/xl	All versions
Cisco Nexus 3524 Xl	All versions
Cisco Nexus 3548	All versions
Cisco Nexus 3548 X	All versions
Cisco Nexus 3548 X/xl	All versions
Cisco Nexus 3548 Xl	All versions
Cisco Nexus 3600	All versions
Cisco Nexus 36180yc R	All versions
Cisco Nexus 3636c R	All versions
Cisco Nexus 9000	All versions
Cisco Nexus 9000 In Aci Mode	All versions
Cisco Nexus 9000 In Standalone	All versions
Cisco Nexus 9000 In Standalone Nx Os Mode	All versions
Cisco Nexus 9000v	All versions
Cisco Nexus 9200	All versions
Cisco Nexus 92160yc X	All versions
Cisco Nexus 9221c	All versions
Cisco Nexus 92300yc	All versions
Cisco Nexus 92304qc	All versions
Cisco Nexus 92348gc X	All versions
Cisco Nexus 9236c	All versions
Cisco Nexus 9272q	All versions
Cisco Nexus 9300	All versions
Cisco Nexus 93108tc Ex	All versions
Cisco Nexus 93108tc Ex 24	All versions
Cisco Nexus 93108tc Fx	All versions
Cisco Nexus 93108tc Fx 24	All versions
Cisco Nexus 93108tc Fx3p	All versions
Cisco Nexus 93120tx	All versions
Cisco Nexus 93128	All versions
Cisco Nexus 93128tx	All versions
Cisco Nexus 9316d Gx	All versions
Cisco Nexus 93180lc Ex	All versions
Cisco Nexus 93180tc Ex	All versions
Cisco Nexus 93180yc Ex	All versions
Cisco Nexus 93180yc Ex 24	All versions
Cisco Nexus 93180yc Fx	All versions
Cisco Nexus 93180yc Fx 24	All versions
Cisco Nexus 93180yc Fx3	All versions
Cisco Nexus 93180yc Fx3s	All versions
Cisco Nexus 93216tc Fx2	All versions
Cisco Nexus 93240yc Fx2	All versions
Cisco Nexus 9332c	All versions
Cisco Nexus 9332pq	All versions
Cisco Nexus 93360yc Fx2	All versions
Cisco Nexus 9336c Fx2	All versions
Cisco Nexus 9336c Fx2 E	All versions
Cisco Nexus 9336pq	All versions
Cisco Nexus 9336pq Aci Spine	All versions
Cisco Nexus 9348gc Fxp	All versions
Cisco Nexus 93600cd Gx	All versions
Cisco Nexus 9364c	All versions
Cisco Nexus 9364c Gx	All versions
Cisco Nexus 9372px	All versions
Cisco Nexus 9372px E	All versions
Cisco Nexus 9372tx	All versions
Cisco Nexus 9372tx E	All versions
Cisco Nexus 9396px	All versions
Cisco Nexus 9396tx	All versions
Cisco Nexus 9500	All versions
Cisco Nexus 9500 Supervisor A	All versions
Cisco Nexus 9500 Supervisor A+	All versions
Cisco Nexus 9500 Supervisor B	All versions
Cisco Nexus 9500 Supervisor B+	All versions
Cisco Nexus 9500r	All versions
Cisco Nexus 9504	All versions
Cisco Nexus 9508	All versions
Cisco Nexus 9516	All versions

Configuration D

5 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Up to 7.3\(8\)n1\(1\)
Cisco Ios	Up to 7.3\(8\)n1\(1\)
Cisco Ios Xe	Up to 7.3\(8\)n1\(1\)
Cisco Ios Xr	Up to 7.3\(8\)n1\(1\)
Cisco Nx Os	Up to 7.3\(8\)n1\(1\)

Running on/with	Platform Versions
Cisco Nexus 5000	All versions
Cisco Nexus 5010	All versions
Cisco Nexus 5020	All versions
Cisco Nexus 5500	All versions
Cisco Nexus 5548p	All versions
Cisco Nexus 5548up	All versions
Cisco Nexus 5596t	All versions
Cisco Nexus 5596up	All versions
Cisco Nexus 5600	All versions
Cisco Nexus 56128p	All versions
Cisco Nexus 5624q	All versions
Cisco Nexus 5648q	All versions
Cisco Nexus 5672up	All versions
Cisco Nexus 5672up 16g	All versions
Cisco Nexus 5696q	All versions
Cisco Nexus 6000	All versions
Cisco Nexus 6001	All versions
Cisco Nexus 6001p	All versions
Cisco Nexus 6001t	All versions
Cisco Nexus 6004	All versions
Cisco Nexus 6004x	All versions

Configuration E

4 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Up to 3.2\(3o\)a
Cisco Ios	Up to 3.2\(3o\)a
Cisco Ios Xe	Up to 3.2\(3o\)a
Cisco Ios Xr	Up to 3.2\(3o\)a

Running on/with	Platform Versions
Cisco Ucs 6200	All versions
Cisco Ucs 6248 Up Fabric Interconnect	All versions
Cisco Ucs 6248up	All versions
Cisco Ucs 6296 Up Fabric Interconnect	All versions
Cisco Ucs 6296up	All versions
Cisco Ucs 6300	All versions
Cisco Ucs 6324	All versions
Cisco Ucs 6324 Fabric Interconnect	All versions
Cisco Ucs 6332	All versions
Cisco Ucs 6332 16up	All versions
Cisco Ucs 6332 16up Fabric Interconnect	All versions
Cisco Ucs 6332 Fabric Interconnect	All versions

Configuration F

5 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Up to 4.1\(1a\)a
Cisco Ios	Up to 4.1\(1a\)a
Cisco Ios Xe	Up to 4.1\(1a\)a
Cisco Ios Xr	Up to 4.1\(1a\)a
Cisco Nx Os	Up to 3.2\(3o\)a

Running on/with	Platform Versions
Cisco Ucs 6400	All versions
Cisco Ucs 6454	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ

Source: psirt@cisco.com

Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.