Description
A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service (DoS) condition. This vulnerability is due to a logic error in the implementation of the system login block-for command when an attack is detected and acted upon. An attacker could exploit this vulnerability by performing a brute-force login attack on an affected device. A successful exploit could allow the attacker to cause a login process to reload, which could result in a delay during authentication to the affected device.
Published: 2021-08-25
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-7057 A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a login process to unexpectedly restart, causing a denial of service (DoS) condition. This vulnerability is due to a logic error in the implementation of the system login block-for command when an attack is detected and acted upon. An attacker could exploit this vulnerability by performing a brute-force login attack on an affected device. A successful exploit could allow the attacker to cause a login process to reload, which could result in a delay during authentication to the affected device.
History

Thu, 07 Nov 2024 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Cisco Nexus 3000 Nexus 3048 Nexus 31108pc-v Nexus 31108tc-v Nexus 31128pq Nexus 3132c-z Nexus 3132q-v Nexus 3132q-x\/3132q-xl Nexus 3164q Nexus 3172pq\/pq-xl Nexus 3172tq-xl Nexus 3232c Nexus 3264c-e Nexus 3264q Nexus 3408-s Nexus 34180yc Nexus 3432d-s Nexus 3464c Nexus 3524-x\/xl Nexus 3548-x\/xl Nexus 36180yc-r Nexus 3636c-r Nexus 5548p Nexus 5548up Nexus 5596t Nexus 5596up Nexus 56128p Nexus 5624q Nexus 5648q Nexus 5672up Nexus 5672up-16g Nexus 5696q Nexus 6001 Nexus 6004 Nexus 7000 10-slot Nexus 7000 18-slot Nexus 7000 4-slot Nexus 7000 9-slot Nexus 7000 Supervisor 1 Nexus 7000 Supervisor 2 Nexus 7000 Supervisor 2e Nexus 7004 Nexus 7009 Nexus 7010 Nexus 7018 Nexus 7700 Nexus 7700 10-slot Nexus 7700 18-slot Nexus 7700 2-slot Nexus 7700 6-slot Nexus 7700 Supervisor 2e Nexus 7700 Supervisor 3e Nexus 7702 Nexus 7706 Nexus 7710 Nexus 7718 Nexus 9000v Nexus 92160yc-x Nexus 92300yc Nexus 92304qc Nexus 92348gc-x Nexus 9236c Nexus 9272q Nexus 93108tc-ex Nexus 93108tc-ex-24 Nexus 93108tc-fx Nexus 93108tc-fx-24 Nexus 93108tc-fx3p Nexus 93120tx Nexus 93128tx Nexus 9316d-gx Nexus 93180lc-ex Nexus 93180yc-ex Nexus 93180yc-ex-24 Nexus 93180yc-fx Nexus 93180yc-fx-24 Nexus 93180yc-fx3 Nexus 93180yc-fx3s Nexus 93216tc-fx2 Nexus 93240yc-fx2 Nexus 9332c Nexus 9332pq Nexus 93360yc-fx2 Nexus 9336c-fx2 Nexus 9336c-fx2-e Nexus 9348gc-fxp Nexus 93600cd-gx Nexus 9364c Nexus 9364c-gx Nexus 9372px Nexus 9372px-e Nexus 9372tx Nexus 9372tx-e Nexus 9396px Nexus 9396tx Nexus 9508 Nx-os Unified Computing System Unified Computing System 6248up Unified Computing System 6296up Unified Computing System 6324 Unified Computing System 6332 Unified Computing System 6332-16up
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-07T22:02:13.143Z

Reserved: 2020-11-13T00:00:00.000Z

Link: CVE-2021-1590

cve-icon Vulnrichment

Updated: 2024-08-03T16:18:10.362Z

cve-icon NVD

Status : Modified

Published: 2021-08-25T20:15:11.657

Modified: 2024-11-21T05:44:41.597

Link: CVE-2021-1590

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses