CVE-2021-1230— Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability
Quick assessment
Affected
Cisco Cisco NX-OS System Software in ACI Mode
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列光纤交换机。 Cisco Nexus 9000 Series Fabric Switches 存在安全漏洞，该漏洞允许未经身份验证的远程攻击者导致路由进程崩溃。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1498 · Network Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-1230
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
参数问题
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列光纤交换机。 Cisco Nexus 9000 Series Fabric Switches 存在安全漏洞，该漏洞允许未经身份验证的远程攻击者导致路由进程崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS System Software in ACI Mode | n/a | - |
|
II. Public POCs for CVE-2021-1230
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1230
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-1230 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSK vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2021-02-24 · 13 CVEs total
| CVE-2021-1388 | 10.0 CRITICAL | Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication By |
| CVE-2021-1361 | 9.8 CRITICAL | Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability |
| CVE-2021-1393 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1396 | 9.8 CRITICAL | Cisco Application Services Engine Unauthorized Access Vulnerabilities |
| CVE-2021-1368 | 8.8 HIGH | Cisco FXOS and NX-OS Software Unidirectional Link Detection Denial of Service and Arbitrar |
| CVE-2021-1387 | 8.6 HIGH | Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability |
| CVE-2021-1228 | 7.4 HIGH | Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized A |
| CVE-2021-1229 | 5.8 MEDIUM | Cisco NX-OS Software ICMP Version 6 Memory Leak Denial of Service Vulnerability |
| CVE-2021-1450 | 5.5 MEDIUM | Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability |
| CVE-2021-1231 | 4.7 MEDIUM | Cisco Nexus 9000 Series Fabric Switches ACI Mode Link Layer Discovery Protocol Port Denial |
| CVE-2021-1367 | 4.3 MEDIUM | Cisco NX-OS Software Protocol Independent Multicast Denial of Service Vulnerability |
| CVE-2021-1227 | Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco NX-OS System Software in ACI Mode
-
CVE-2026-20033
Cisco NX-OS Software Denial of Service Vulnerability -
CVE-2026-20048
Cisco NX-OS Software SNMP Denial of Service Vulnerability -
CVE-2023-20185
Cisco Nexus 9000 Series Fabric Switches 加密问题漏洞 -
CVE-2023-20089
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Lay -
CVE-2021-1586
Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod a
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
Same weakness: CWE-233
-
CVE-2026-0515
Insufficient parameter validation in the QNX Neutrino kernel -
CVE-2026-32998
Veeam Service Provider Console 安全漏洞 -
CVE-2026-33585
Arqit SKA-Platform Improper Handling of Parameters Vulnerabi -
CVE-2018-25233
WebDrive 18.00.5057 Denial of Service via Secure WebDAV -
CVE-2026-2370
Improper Handling of Parameters in GitLab
V. Comments for CVE-2021-1230
No comments yet