Severity
High
Analysis Summary
CVE-2021-1368
Cisco FXOS and NX-OS Software could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sending specially-crafted UDLD protocol packets, an attacker could exploit this vulnerability to execute arbitrary code with administrative privileges or cause the Cisco UDLD process to crash and restart multiple times, and results in a denial of service condition.
Impact
Gain access
Affected Vendors
Cisco
Affected Products
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 7000 Series Switches
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information and complete list of affected products.