CVE-2021-1590 : A vulnerability in the implementation of the system login block-for command for

A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service (DoS) condition. This vulnerability is due to a logic error in the implementation of the system login block-for command when an attack is detected and acted upon. An attacker could exploit this vulnerability by performing a brute-force login attack on an affected device. A successful exploit could allow the attacker to cause a login process to reload, which could result in a delay during authentication to the affected device.

Published 2021-08-25 20:15:12

Updated 2021-09-03 13:26:45

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2021-1590

Cisco » Nx-os » Version: 7.0(3)i4(0.116)
cpe:2.3:o:cisco:nx-os:7.0\(3\)i4\(0.116\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3000 » Version: N/A
When used together with: Cisco » Nexus 3048 » Version: N/A
When used together with: Cisco » Nexus 31108pc-v » Version: N/A
When used together with: Cisco » Nexus 31108tc-v » Version: N/A
When used together with: Cisco » Nexus 31128pq » Version: N/A
When used together with: Cisco » Nexus 3132c-z » Version: N/A
When used together with: Cisco » Nexus 3132q-v » Version: N/A
When used together with: Cisco » Nexus 3132q-x/3132q-xl » Version: N/A
When used together with: Cisco » Nexus 3164q » Version: N/A
When used together with: Cisco » Nexus 3172pq/pq-xl » Version: N/A
When used together with: Cisco » Nexus 3172tq-xl » Version: N/A
When used together with: Cisco » Nexus 3232c » Version: N/A
When used together with: Cisco » Nexus 3264c-e » Version: N/A
When used together with: Cisco » Nexus 3264q » Version: N/A
When used together with: Cisco » Nexus 3408-s » Version: N/A
When used together with: Cisco » Nexus 34180yc » Version: N/A
When used together with: Cisco » Nexus 3432d-s » Version: N/A
When used together with: Cisco » Nexus 3464c » Version: N/A
When used together with: Cisco » Nexus 3524-x/xl » Version: N/A
When used together with: Cisco » Nexus 3548-x/xl » Version: N/A
When used together with: Cisco » Nexus 36180yc-r » Version: N/A
When used together with: Cisco » Nexus 3636c-r » Version: N/A
When used together with: Cisco » Nexus 5548p » Version: N/A
When used together with: Cisco » Nexus 5548up » Version: N/A
When used together with: Cisco » Nexus 5596t » Version: N/A
When used together with: Cisco » Nexus 5596up » Version: N/A
When used together with: Cisco » Nexus 56128p » Version: N/A
When used together with: Cisco » Nexus 5624q » Version: N/A
When used together with: Cisco » Nexus 5648q » Version: N/A
When used together with: Cisco » Nexus 5672up » Version: N/A
When used together with: Cisco » Nexus 5672up-16g » Version: N/A
When used together with: Cisco » Nexus 5696q » Version: N/A
When used together with: Cisco » Nexus 6001 » Version: N/A
When used together with: Cisco » Nexus 6004 » Version: N/A
When used together with: Cisco » Nexus 7000 10-slot » Version: N/A
When used together with: Cisco » Nexus 7000 18-slot » Version: N/A
When used together with: Cisco » Nexus 7000 4-slot » Version: N/A
When used together with: Cisco » Nexus 7000 9-slot » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7004 » Version: N/A
When used together with: Cisco » Nexus 7009 » Version: N/A
When used together with: Cisco » Nexus 7010 » Version: N/A
When used together with: Cisco » Nexus 7018 » Version: N/A
When used together with: Cisco » Nexus 7700 » Version: N/A
When used together with: Cisco » Nexus 7700 10-slot » Version: N/A
When used together with: Cisco » Nexus 7700 18-slot » Version: N/A
When used together with: Cisco » Nexus 7700 2-slot » Version: N/A
When used together with: Cisco » Nexus 7700 6-slot » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
When used together with: Cisco » Nexus 7702 » Version: N/A
When used together with: Cisco » Nexus 7706 » Version: N/A
When used together with: Cisco » Nexus 7710 » Version: N/A
When used together with: Cisco » Nexus 7718 » Version: N/A
When used together with: Cisco » Nexus 9000v » Version: N/A
When used together with: Cisco » Nexus 92160yc-x » Version: N/A
When used together with: Cisco » Nexus 92300yc » Version: N/A
When used together with: Cisco » Nexus 92304qc » Version: N/A
When used together with: Cisco » Nexus 92348gc-x » Version: N/A
When used together with: Cisco » Nexus 9236c » Version: N/A
When used together with: Cisco » Nexus 9272q » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex-24 » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx-24 » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx3p » Version: N/A
When used together with: Cisco » Nexus 93120tx » Version: N/A
When used together with: Cisco » Nexus 93128tx » Version: N/A
When used together with: Cisco » Nexus 9316d-gx » Version: N/A
When used together with: Cisco » Nexus 93180lc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-ex-24 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx-24 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx3 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx3s » Version: N/A
When used together with: Cisco » Nexus 93216tc-fx2 » Version: N/A
When used together with: Cisco » Nexus 93240yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9332c » Version: N/A
When used together with: Cisco » Nexus 9332pq » Version: N/A
When used together with: Cisco » Nexus 93360yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2-e » Version: N/A
When used together with: Cisco » Nexus 9348gc-fxp » Version: N/A
When used together with: Cisco » Nexus 93600cd-gx » Version: N/A
When used together with: Cisco » Nexus 9364c » Version: N/A
When used together with: Cisco » Nexus 9364c-gx » Version: N/A
When used together with: Cisco » Nexus 9372px » Version: N/A
When used together with: Cisco » Nexus 9372px-e » Version: N/A
When used together with: Cisco » Nexus 9372tx » Version: N/A
When used together with: Cisco » Nexus 9372tx-e » Version: N/A
When used together with: Cisco » Nexus 9396px » Version: N/A
When used together with: Cisco » Nexus 9396tx » Version: N/A
When used together with: Cisco » Nexus 9508 » Version: N/A
Cisco » Nx-os » Version: 7.3(7)n1(1b)
cpe:2.3:o:cisco:nx-os:7.3\(7\)n1\(1b\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3000 » Version: N/A
When used together with: Cisco » Nexus 3048 » Version: N/A
When used together with: Cisco » Nexus 31108pc-v » Version: N/A
When used together with: Cisco » Nexus 31108tc-v » Version: N/A
When used together with: Cisco » Nexus 31128pq » Version: N/A
When used together with: Cisco » Nexus 3132c-z » Version: N/A
When used together with: Cisco » Nexus 3132q-v » Version: N/A
When used together with: Cisco » Nexus 3132q-x/3132q-xl » Version: N/A
When used together with: Cisco » Nexus 3164q » Version: N/A
When used together with: Cisco » Nexus 3172pq/pq-xl » Version: N/A
When used together with: Cisco » Nexus 3172tq-xl » Version: N/A
When used together with: Cisco » Nexus 3232c » Version: N/A
When used together with: Cisco » Nexus 3264c-e » Version: N/A
When used together with: Cisco » Nexus 3264q » Version: N/A
When used together with: Cisco » Nexus 3408-s » Version: N/A
When used together with: Cisco » Nexus 34180yc » Version: N/A
When used together with: Cisco » Nexus 3432d-s » Version: N/A
When used together with: Cisco » Nexus 3464c » Version: N/A
When used together with: Cisco » Nexus 3524-x/xl » Version: N/A
When used together with: Cisco » Nexus 3548-x/xl » Version: N/A
When used together with: Cisco » Nexus 36180yc-r » Version: N/A
When used together with: Cisco » Nexus 3636c-r » Version: N/A
When used together with: Cisco » Nexus 5548p » Version: N/A
When used together with: Cisco » Nexus 5548up » Version: N/A
When used together with: Cisco » Nexus 5596t » Version: N/A
When used together with: Cisco » Nexus 5596up » Version: N/A
When used together with: Cisco » Nexus 56128p » Version: N/A
When used together with: Cisco » Nexus 5624q » Version: N/A
When used together with: Cisco » Nexus 5648q » Version: N/A
When used together with: Cisco » Nexus 5672up » Version: N/A
When used together with: Cisco » Nexus 5672up-16g » Version: N/A
When used together with: Cisco » Nexus 5696q » Version: N/A
When used together with: Cisco » Nexus 6001 » Version: N/A
When used together with: Cisco » Nexus 6004 » Version: N/A
When used together with: Cisco » Nexus 7000 10-slot » Version: N/A
When used together with: Cisco » Nexus 7000 18-slot » Version: N/A
When used together with: Cisco » Nexus 7000 4-slot » Version: N/A
When used together with: Cisco » Nexus 7000 9-slot » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 1 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2 » Version: N/A
When used together with: Cisco » Nexus 7000 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7004 » Version: N/A
When used together with: Cisco » Nexus 7009 » Version: N/A
When used together with: Cisco » Nexus 7010 » Version: N/A
When used together with: Cisco » Nexus 7018 » Version: N/A
When used together with: Cisco » Nexus 7700 » Version: N/A
When used together with: Cisco » Nexus 7700 10-slot » Version: N/A
When used together with: Cisco » Nexus 7700 18-slot » Version: N/A
When used together with: Cisco » Nexus 7700 2-slot » Version: N/A
When used together with: Cisco » Nexus 7700 6-slot » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 2e » Version: N/A
When used together with: Cisco » Nexus 7700 Supervisor 3e » Version: N/A
When used together with: Cisco » Nexus 7702 » Version: N/A
When used together with: Cisco » Nexus 7706 » Version: N/A
When used together with: Cisco » Nexus 7710 » Version: N/A
When used together with: Cisco » Nexus 7718 » Version: N/A
When used together with: Cisco » Nexus 9000v » Version: N/A
When used together with: Cisco » Nexus 92160yc-x » Version: N/A
When used together with: Cisco » Nexus 92300yc » Version: N/A
When used together with: Cisco » Nexus 92304qc » Version: N/A
When used together with: Cisco » Nexus 92348gc-x » Version: N/A
When used together with: Cisco » Nexus 9236c » Version: N/A
When used together with: Cisco » Nexus 9272q » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex-24 » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx-24 » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx3p » Version: N/A
When used together with: Cisco » Nexus 93120tx » Version: N/A
When used together with: Cisco » Nexus 93128tx » Version: N/A
When used together with: Cisco » Nexus 9316d-gx » Version: N/A
When used together with: Cisco » Nexus 93180lc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-ex-24 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx-24 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx3 » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx3s » Version: N/A
When used together with: Cisco » Nexus 93216tc-fx2 » Version: N/A
When used together with: Cisco » Nexus 93240yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9332c » Version: N/A
When used together with: Cisco » Nexus 9332pq » Version: N/A
When used together with: Cisco » Nexus 93360yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2-e » Version: N/A
When used together with: Cisco » Nexus 9348gc-fxp » Version: N/A
When used together with: Cisco » Nexus 93600cd-gx » Version: N/A
When used together with: Cisco » Nexus 9364c » Version: N/A
When used together with: Cisco » Nexus 9364c-gx » Version: N/A
When used together with: Cisco » Nexus 9372px » Version: N/A
When used together with: Cisco » Nexus 9372px-e » Version: N/A
When used together with: Cisco » Nexus 9372tx » Version: N/A
When used together with: Cisco » Nexus 9372tx-e » Version: N/A
When used together with: Cisco » Nexus 9396px » Version: N/A
When used together with: Cisco » Nexus 9396tx » Version: N/A
When used together with: Cisco » Nexus 9508 » Version: N/A
Cisco » Unified Computing System
Versions from including (>=) 4.1 and before (<) 4.1\(3d\)
cpe:2.3:o:cisco:unified_computing_system:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Unified Computing System 6248up » Version: N/A
When used together with: Cisco » Unified Computing System 6296up » Version: N/A
When used together with: Cisco » Unified Computing System 6324 » Version: N/A
When used together with: Cisco » Unified Computing System 6332 » Version: N/A
When used together with: Cisco » Unified Computing System 6332-16up » Version: N/A
Cisco » Unified Computing System
Versions before (<) 4.0\(4m\)
cpe:2.3:o:cisco:unified_computing_system:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Unified Computing System 6248up » Version: N/A
When used together with: Cisco » Unified Computing System 6296up » Version: N/A
When used together with: Cisco » Unified Computing System 6324 » Version: N/A
When used together with: Cisco » Unified Computing System 6332 » Version: N/A
When used together with: Cisco » Unified Computing System 6332-16up » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-1590

EPSS FAQ

0.82%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 72 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-1590

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2021-1590

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2021-1590

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-login-blockfor-RwjGVEcu

Cisco NX-OS Software system login block-for Denial of Service Vulnerability
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-1590

Products affected by CVE-2021-1590

Exploit prediction scoring system (EPSS) score for CVE-2021-1590

CVSS scores for CVE-2021-1590

CWE ids for CVE-2021-1590

References for CVE-2021-1590