Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-1389
HistoryFeb 04, 2021 - 5:15 p.m.

CVE-2021-1389

2021-02-0417:15:18
CWE-284
[email protected]
web.nvd.nist.gov
5
cisco
ipv6
vulnerability

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

47.9%

JSON

A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated, remote attacker to bypass an IPv6 access control list (ACL) that is configured for an interface of an affected device. The vulnerability is due to improper processing of IPv6 traffic that is sent through an affected device. An attacker could exploit this vulnerability by sending crafted IPv6 packets that traverse the affected device. A successful exploit could allow the attacker to access resources that would typically be protected by the interface ACL.

Affected configurations

Nvd
Node
ciscoios_xrRange<6.6.3
OR
ciscoios_xrMatch7.1.0
OR
ciscoios_xrMatch7.2.0
AND
cisconcs_540Match-
OR
cisconcs_5501Match-
OR
cisconcs_5501-seMatch-
OR
cisconcs_5502Match-
OR
cisconcs_5502-seMatch-
OR
cisconcs_5508Match-
OR
cisconcs_5516Match-
OR
cisconcs_560Match-
Node
cisconx-osMatch-
AND
cisconexus_3600Match-
OR
cisconexus_9500_rMatch-
VendorProductVersionCPE
ciscoios_xr*cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
ciscoios_xr7.1.0cpe:2.3:o:cisco:ios_xr:7.1.0:*:*:*:*:*:*:*
ciscoios_xr7.2.0cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*
cisconcs_540-cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*
cisconcs_5501-cpe:2.3:h:cisco:ncs_5501:-:*:*:*:*:*:*:*
cisconcs_5501-se-cpe:2.3:h:cisco:ncs_5501-se:-:*:*:*:*:*:*:*
cisconcs_5502-cpe:2.3:h:cisco:ncs_5502:-:*:*:*:*:*:*:*
cisconcs_5502-se-cpe:2.3:h:cisco:ncs_5502-se:-:*:*:*:*:*:*:*
cisconcs_5508-cpe:2.3:h:cisco:ncs_5508:-:*:*:*:*:*:*:*
cisconcs_5516-cpe:2.3:h:cisco:ncs_5516:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

cnvd 1
cve 1
prion 1
nessus 3
cvelist 1
cisco 1
cnvd
cnvd
Cisco IOS XR and Cisco NX-OS Software Access Control Error Vulnerability
2021-02-04 00:00:00
cve
cve
CVE-2021-1389
2021-02-04 17:15:18
prion
prion
Improper access control
2021-02-04 17:15:00
nessus
nessus
Cisco IOS XR Software IPv6 Access Control List Bypass (cisco-sa-ipv6-acl-CHgdYk8j)
2021-02-12 00:00:00
Cisco NX-OS Software IPv6 Access Control List Bypass (cisco-sa-ipv6-acl-CHgdYk8j)
2021-02-12 00:00:00
Cisco IOS XR and NX-OS Software IPv6 Access Control List Bypass (CVE-2021-1389)
2024-01-04 00:00:00
cvelist
cvelist
CVE-2021-1389 Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability
2021-02-04 16:40:16
cisco
cisco
Cisco IOS XR and Cisco NX-OS Software IPv6 Access Control List Bypass Vulnerability
2021-02-03 16:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.001

Percentile

47.9%

JSON
Related for NVD:CVE-2021-1389
cnvd1cve1prion1nessus3cvelist1cisco1