CVE-2021-34713

HIGH Year: 2021
CVSS v3 Score
7.4
High
CVSS v2 Score
6.1
Medium
Weakness Type
CWE-399
View all →

Vulnerability Description

A vulnerability in the Layer 2 punt code of Cisco IOS XR Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause the affected line card to reboot. This vulnerability is due to incorrect handling of specific Ethernet frames that cause a spin loop that can make the network processors unresponsive. An attacker could exploit this vulnerability by sending specific types of Ethernet frames on the segment where the affected line cards are attached. A successful exploit could allow the attacker to cause the affected line card to reboot.

Related Vulnerabilities

CVE-2018-0102

HIGH
CVSS:7.4(High)

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. Th...

CWE-3992018

CVE-2018-0165

HIGH
CVSS:7.4(High)

A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust buffers on an aff...

CWE-3992018

CVE-2018-0241

HIGH
CVSS:7.4(High)

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device....

CWE-3992018

CVE-2018-15373

HIGH
CVSS:7.4(High)

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on a...

CWE-3992018

CVE-2019-16018

HIGH
CVSS:7.4(High)

A vulnerability in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of s...

CWE-3992019

CVE-2019-1796

HIGH
CVSS:7.4(High)

A vulnerability in the handling of Inter-Access Point Protocol (IAPP) messages by Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, adjacent attacker to cause a denial of se...

CWE-3992019