CVE-2021-1228— Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1228
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the infrastructure VLAN. This vulnerability is due to insufficient security requirements during the Link Layer Discovery Protocol (LLDP) setup phase of the infrastructure VLAN. An attacker could exploit this vulnerability by sending a crafted LLDP packet on the adjacent subnet to an affected device. A successful exploit could allow the attacker to connect an unauthorized server to the infrastructure VLAN, which is highly privileged. With a connection to the infrastructure VLAN, the attacker can make unauthorized connections to Cisco Application Policy Infrastructure Controller (APIC) services or join other host endpoints.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
访问控制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Application Policy Infrastructure Controller和Cisco Nexus 9000 Series Fabric Switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Application Policy Infrastructure Controller（APIC）和Cisco Nexus 9000 Series Fabric Switches都是美国思科（Cisco）公司的产品。Cisco Application Policy Infrastructure Controller是一款自动化的基础架构部署和治理解决方案。Cisco Nexus 9000 Series Fabric Switches是一款9000系列光纤交换机。 Cisco Nexus 90
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS System Software in ACI Mode 11.0(1b) | n/a | - |
II. Public POCs for CVE-2021-1228
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1228
请登录查看更多情报信息。
- Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerabilityvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-1228
Same Patch Batch · Cisco · 2021-02-24 · 13 CVEs total
| CVE-2021-1388 | 10.0 CRITICAL | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication By |
| CVE-2021-1361 | 9.8 CRITICAL | Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability |
| CVE-2021-1393 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1396 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1368 | 8.8 HIGH | Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrar |
| CVE-2021-1230 | 8.6 HIGH | Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service |
| CVE-2021-1387 | 8.6 HIGH | Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability |
| CVE-2021-1229 | 5.8 MEDIUM | Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability |
| CVE-2021-1450 | 5.5 MEDIUM | Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability |
| CVE-2021-1231 | 4.7 MEDIUM | Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial |
| CVE-2021-1367 | 4.3 MEDIUM | Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability |
| CVE-2021-1227 | Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability |
IV. Related Vulnerabilities
Same vendor: Cisco
- CVE-2026-20224
Cisco Catalyst SD-WAN Manager XML External Entity Injection - CVE-2026-20210
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerabi - CVE-2026-20209
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerabi - CVE-2026-20182
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulne - CVE-2026-20219
Cisco Slido 安全漏洞
Same weakness: CWE-284
- CVE-2026-45301
Open WebUI: Missing permission check in files API allows aut - CVE-2026-44556
Open WebUI: responses passthrough endpoint lacks access cont - CVE-2026-44774
Traefik: Gateway API TraefikService backend accepts rest@int - CVE-2025-0040
NXP JTAG-AXI访问控制漏洞 - CVE-2026-44478
hoppscotch: Unauthenticated Onboarding Config Disclosure via
V. Comments for CVE-2021-1228
No comments yet