CVE-2021-1230— Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1230
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
参数问题
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列光纤交换机。 Cisco Nexus 9000 Series Fabric Switches 存在安全漏洞，该漏洞允许未经身份验证的远程攻击者导致路由进程崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS System Software in ACI Mode | n/a | - |
II. Public POCs for CVE-2021-1230
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1230
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSKvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-1230
Same Patch Batch · Cisco · 2021-02-24 · 13 CVEs total
| CVE-2021-1388 | 10.0 CRITICAL | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication By |
| CVE-2021-1361 | 9.8 CRITICAL | Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability |
| CVE-2021-1393 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1396 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1368 | 8.8 HIGH | Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrar |
| CVE-2021-1387 | 8.6 HIGH | Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability |
| CVE-2021-1228 | 7.4 HIGH | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized A |
| CVE-2021-1229 | 5.8 MEDIUM | Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability |
| CVE-2021-1450 | 5.5 MEDIUM | Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability |
| CVE-2021-1231 | 4.7 MEDIUM | Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial |
| CVE-2021-1367 | 4.3 MEDIUM | Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability |
| CVE-2021-1227 | Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco NX-OS System Software in ACI Mode
- CVE-2026-20033
Cisco NX-OS Software Denial of Service Vulnerability - CVE-2026-20048
Cisco NX-OS Software SNMP Denial of Service Vulnerability - CVE-2023-20185
Cisco Nexus 9000 Series Fabric Switches 加密问题漏洞 - CVE-2023-20089
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Lay - CVE-2021-1586
Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod a
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-233
- CVE-2018-25233
WebDrive 18.00.5057 Denial of Service via Secure WebDAV - CVE-2026-2370
Improper Handling of Parameters in GitLab - CVE-2023-20514
AMD Secure Processor 安全漏洞 - CVE-2025-55080
Improper Parameter Check in ThreadX Syscall Implementation - CVE-2025-55078
Incomplete validation of kernel object pointers in system ca
V. Comments for CVE-2021-1230
No comments yet