CVEvulnerability

CVE-2021-1352

6.5 MEDIUM Published 2021-03-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
2.9 LOW — AV:A/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119, CWE-823

Description

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected configurations

• cisco ios xe 16.4.1 • cisco ios xe 16.4.2 • cisco ios xe 16.4.3 • cisco ios xe 16.5.1 • cisco ios xe 16.5.1a • cisco ios xe 16.5.1b • cisco ios xe 16.5.2 • cisco ios xe 16.5.3 • cisco ios xe 16.6.1 • cisco ios xe 16.6.2 • cisco ios xe 16.6.3 • cisco ios xe 16.6.4 • cisco ios xe 16.6.4a • cisco ios xe 16.6.4s • cisco ios xe 16.6.5 • cisco ios xe 16.6.5a • cisco ios xe 16.6.5b • cisco ios xe 16.6.6 • cisco ios xe 16.6.7 • cisco ios xe 16.6.7a • cisco ios xe 16.6.8 • cisco ios xe 16.7.1 • cisco ios xe 16.7.2 • cisco ios xe 16.7.3 • cisco ios xe 16.8.1 • cisco ios xe 16.8.1a • cisco ios xe 16.8.1b • cisco ios xe 16.8.1c • cisco ios xe 16.8.1s • cisco ios xe 16.8.2 • cisco ios xe 16.8.3 • cisco ios xe 16.9.1 • cisco ios xe 16.9.1a • cisco ios xe 16.9.1b • cisco ios xe 16.9.1c • cisco ios xe 16.9.1d • cisco ios xe 16.9.1s • cisco ios xe 16.9.2 • cisco ios xe 16.9.2a • cisco ios xe 16.9.2s • cisco ios xe 16.9.3 • cisco ios xe 16.9.3a • cisco ios xe 16.9.3h • cisco ios xe 16.9.3s • cisco ios xe 16.9.4 • cisco ios xe 16.9.4c • cisco ios xe 16.9.5 • cisco ios xe 16.9.5f • cisco ios xe 16.9.6 • cisco ios xe 16.10.1 • cisco ios xe 16.10.1a • cisco ios xe 16.10.1b • cisco ios xe 16.10.1e • cisco ios xe 16.10.1s • cisco ios xe 16.10.2 • cisco ios xe 16.10.3 • cisco ios xe 16.11.1 • cisco ios xe 16.11.1a • cisco ios xe 16.11.1b • cisco ios xe 16.11.1c … and 29 more

Related

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-823 Use of Out-of-range Pointer Offset weakness

References