Cisco IOS XR BGP RPKI DoS Vulnerability (CVE-2021-1440) Analysis

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco IOS XR Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability - Vulnerability ID: cisco-sa-xrbgp-rpki-dos-gvmjxkb - CVE ID: CVE-2021-1440 - CWE ID: CWE-617 - CVSS Score: Base 6.8 2. Vulnerability Impact: - Affected Products: Cisco IOS XR Software releases 4.3.0 through 7.3.0 - Affected Configurations: Devices running Cisco IOS XR Software with RPKI configuration enabled. 3. Exploitation: - Exploitation Method: Exploited by sending specific RTR packets to the RPKI validation server or via man-in-the-middle attacks. - Impact: May cause the BGP process to crash, resulting in service disruption. 4. Remediation: - Fixed Versions: 7.3.1 and later, 7.3.15 and later, 7.4.1 and later. - Recommendation: Regularly check for Cisco product security updates. 5. Affected Products: - Confirmed Affected Products: Cisco IOS Software, Cisco IOS XE Software, NX-OS Software. 6. Workarounds: - No workarounds available. 7. Source: - Discovery Path: Identified through Cisco TAC support cases. 8. Related Links: - Security Policy: Cisco Security Vulnerability Policy - Subscribe to Security Notifications: Subscribe to Cisco Security Notifications This information helps users understand the vulnerability details, affected products, remediation steps, and how to avoid or mitigate the impact of the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco IOS XR BGP RPKI DoS Vulnerability (CVE-2021-1440) Analysis