Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in one or more leaf switches being removed from the fabric. This vulnerability is due to mishandling of ingress TCP traffic to a specific port. An attacker could exploit this vulnerability by sending a stream of TCP packets to a specific port on a Switched Virtual Interface (SVI) configured on the device. A successful exploit could allow the attacker to cause a specific packet queue to queue network buffers but never process them, leading to an eventual queue wedge. This could cause control plane traffic to be dropped, resulting in a denial of service (DoS) condition where the leaf switches are unavailable. Note: This vulnerability requires a manual intervention to power-cycle the device to recover. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the August 2021 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: August 2021 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74640"].
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-1523US | high8.6 | — | ||
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, remote attacker to cause a queue wedge o… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Nexus 1000V for VMware Switchexternal
- Cisco Nexus 3000 Series Switchesexternal
- Cisco Nexus 5500 Platform Switchesexternal
- Cisco Nexus 6000 Series Switchesexternal
- Cisco Nexus 9000 Series Switchesexternal
- Cisco Nexus 7000 Series Switchesexternal
- Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
Behebungen (60)
- BehobenCisco NX-OS System Software in ACI Mode 13.2(1l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(1m) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(2l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(2o) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3i) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3j) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3n) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3o) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3r) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(3s) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(41d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(4d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(4e) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(5d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(5e) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(5f) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(6i) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(7f) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(7k) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(8d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(9b) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(9f) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 13.2(9h) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.0(1h) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.0(2c) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.0(3c) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.0(3d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(1i) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(1j) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(1k) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(1l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2g) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2m) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2o) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2s) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2u) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2w) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.1(2x) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(1i) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(1j) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(1l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(2e) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(2f) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(2g) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(3j) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(3l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(3n) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(3q) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(4i) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(4k) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(4o) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(4p) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(5k) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(5l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(5n) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(6d) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(6g) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(6h) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(6l) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode 14.2(6o) when installed on Cisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan