CVE-2021-1227
Summary
| CVE | CVE-2021-1227 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-24 20:15:00 UTC |
| Updated | 2021-03-03 15:35:00 UTC |
| Description | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Mds 9148s | - | All | All | All |
| Hardware | Cisco | Mds 9148s | - | All | All | All |
| Hardware | Cisco | Mds 9148s | - | All | All | All |
| Hardware | Cisco | Mds 9250i | - | All | All | All |
| Hardware | Cisco | Mds 9250i | - | All | All | All |
| Hardware | Cisco | Mds 9250i | - | All | All | All |
| Hardware | Cisco | Mds 9706 | - | All | All | All |
| Hardware | Cisco | Mds 9706 | - | All | All | All |
| Hardware | Cisco | Mds 9706 | - | All | All | All |
| Hardware | Cisco | Mds 9710 | - | All | All | All |
| Hardware | Cisco | Mds 9710 | - | All | All | All |
| Hardware | Cisco | Mds 9710 | - | All | All | All |
| Hardware | Cisco | Nexus 3048 | - | All | All | All |
| Hardware | Cisco | Nexus 3048 | - | All | All | All |
| Hardware | Cisco | Nexus 3048 | - | All | All | All |
| Hardware | Cisco | Nexus 31108pv-v | - | All | All | All |
| Hardware | Cisco | Nexus 31108pv-v | - | All | All | All |
| Hardware | Cisco | Nexus 31108pv-v | - | All | All | All |
| Hardware | Cisco | Nexus 31108tc-v | - | All | All | All |
| Hardware | Cisco | Nexus 31108tc-v | - | All | All | All |
| Hardware | Cisco | Nexus 31108tc-v | - | All | All | All |
| Hardware | Cisco | Nexus 31128pq | - | All | All | All |
| Hardware | Cisco | Nexus 31128pq | - | All | All | All |
| Hardware | Cisco | Nexus 31128pq | - | All | All | All |
| Hardware | Cisco | Nexus 3132c-z | - | All | All | All |
| Hardware | Cisco | Nexus 3132c-z | - | All | All | All |
| Hardware | Cisco | Nexus 3132c-z | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-v | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-v | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-v | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-x | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-x | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-x | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3132q-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3164q | - | All | All | All |
| Hardware | Cisco | Nexus 3164q | - | All | All | All |
| Hardware | Cisco | Nexus 3164q | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3172pq-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3232c | - | All | All | All |
| Hardware | Cisco | Nexus 3232c | - | All | All | All |
| Hardware | Cisco | Nexus 3232c | - | All | All | All |
| Hardware | Cisco | Nexus 3264c-e | - | All | All | All |
| Hardware | Cisco | Nexus 3264c-e | - | All | All | All |
| Hardware | Cisco | Nexus 3264c-e | - | All | All | All |
| Hardware | Cisco | Nexus 3264q | - | All | All | All |
| Hardware | Cisco | Nexus 3264q | - | All | All | All |
| Hardware | Cisco | Nexus 3264q | - | All | All | All |
| Hardware | Cisco | Nexus 3408-s | - | All | All | All |
| Hardware | Cisco | Nexus 3408-s | - | All | All | All |
| Hardware | Cisco | Nexus 3408-s | - | All | All | All |
| Hardware | Cisco | Nexus 34180yc | - | All | All | All |
| Hardware | Cisco | Nexus 34180yc | - | All | All | All |
| Hardware | Cisco | Nexus 34180yc | - | All | All | All |
| Hardware | Cisco | Nexus 3432d-s | - | All | All | All |
| Hardware | Cisco | Nexus 3432d-s | - | All | All | All |
| Hardware | Cisco | Nexus 3432d-s | - | All | All | All |
| Hardware | Cisco | Nexus 3464c | - | All | All | All |
| Hardware | Cisco | Nexus 3464c | - | All | All | All |
| Hardware | Cisco | Nexus 3464c | - | All | All | All |
| Hardware | Cisco | Nexus 3524-x | - | All | All | All |
| Hardware | Cisco | Nexus 3524-x | - | All | All | All |
| Hardware | Cisco | Nexus 3524-x | - | All | All | All |
| Hardware | Cisco | Nexus 3524-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3524-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3524-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3548-x | - | All | All | All |
| Hardware | Cisco | Nexus 3548-x | - | All | All | All |
| Hardware | Cisco | Nexus 3548-x | - | All | All | All |
| Hardware | Cisco | Nexus 3548-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3548-xl | - | All | All | All |
| Hardware | Cisco | Nexus 3548-xl | - | All | All | All |
| Hardware | Cisco | Nexus 36180yc-r | - | All | All | All |
| Hardware | Cisco | Nexus 36180yc-r | - | All | All | All |
| Hardware | Cisco | Nexus 36180yc-r | - | All | All | All |
| Hardware | Cisco | Nexus 3636c-r | - | All | All | All |
| Hardware | Cisco | Nexus 3636c-r | - | All | All | All |
| Hardware | Cisco | Nexus 3636c-r | - | All | All | All |
| Hardware | Cisco | Nexus 5548p | - | All | All | All |
| Hardware | Cisco | Nexus 5548p | - | All | All | All |
| Hardware | Cisco | Nexus 5548p | - | All | All | All |
| Hardware | Cisco | Nexus 5548up | - | All | All | All |
| Hardware | Cisco | Nexus 5548up | - | All | All | All |
| Hardware | Cisco | Nexus 5548up | - | All | All | All |
| Hardware | Cisco | Nexus 5596t | - | All | All | All |
| Hardware | Cisco | Nexus 5596t | - | All | All | All |
| Hardware | Cisco | Nexus 5596t | - | All | All | All |
| Hardware | Cisco | Nexus 5596up | - | All | All | All |
| Hardware | Cisco | Nexus 5596up | - | All | All | All |
| Hardware | Cisco | Nexus 5596up | - | All | All | All |
| Hardware | Cisco | Nexus 56128p | - | All | All | All |
| Hardware | Cisco | Nexus 56128p | - | All | All | All |
| Hardware | Cisco | Nexus 56128p | - | All | All | All |
| Hardware | Cisco | Nexus 5624q | - | All | All | All |
| Hardware | Cisco | Nexus 5624q | - | All | All | All |
| Hardware | Cisco | Nexus 5624q | - | All | All | All |
| Hardware | Cisco | Nexus 5648q | - | All | All | All |
| Hardware | Cisco | Nexus 5648q | - | All | All | All |
| Hardware | Cisco | Nexus 5648q | - | All | All | All |
| Hardware | Cisco | Nexus 5672up | - | All | All | All |
| Hardware | Cisco | Nexus 5672up | - | All | All | All |
| Hardware | Cisco | Nexus 5672up | - | All | All | All |
| Hardware | Cisco | Nexus 5672up-16g | - | All | All | All |
| Hardware | Cisco | Nexus 5672up-16g | - | All | All | All |
| Hardware | Cisco | Nexus 5672up-16g | - | All | All | All |
| Hardware | Cisco | Nexus 5696q | - | All | All | All |
| Hardware | Cisco | Nexus 5696q | - | All | All | All |
| Hardware | Cisco | Nexus 5696q | - | All | All | All |
| Hardware | Cisco | Nexus 6001 | - | All | All | All |
| Hardware | Cisco | Nexus 6001 | - | All | All | All |
| Hardware | Cisco | Nexus 6001 | - | All | All | All |
| Hardware | Cisco | Nexus 6004 | - | All | All | All |
| Hardware | Cisco | Nexus 6004 | - | All | All | All |
| Hardware | Cisco | Nexus 6004 | - | All | All | All |
| Hardware | Cisco | Nexus 7000 | - | All | All | All |
| Hardware | Cisco | Nexus 7000 | - | All | All | All |
| Hardware | Cisco | Nexus 7000 | - | All | All | All |
| Hardware | Cisco | Nexus 7700 | - | All | All | All |
| Hardware | Cisco | Nexus 7700 | - | All | All | All |
| Hardware | Cisco | Nexus 7700 | - | All | All | All |
| Hardware | Cisco | Nexus 9200 | - | All | All | All |
| Hardware | Cisco | Nexus 9200 | - | All | All | All |
| Hardware | Cisco | Nexus 9200 | - | All | All | All |
| Hardware | Cisco | Nexus 9300 | - | All | All | All |
| Hardware | Cisco | Nexus 9300 | - | All | All | All |
| Hardware | Cisco | Nexus 9300 | - | All | All | All |
| Hardware | Cisco | Nexus 9500 | - | All | All | All |
| Hardware | Cisco | Nexus 9500 | - | All | All | All |
| Hardware | Cisco | Nexus 9500 | - | All | All | All |
| Operating System | Cisco | Nx-os | 7.3\(8\)n1\(0.809\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(2a\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(3\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(3\)s19 | All | All | All |
| Operating System | Cisco | Nx-os | 9.3\(3\)idi9\(0.569\) | All | All | All |
| Operating System | Cisco | Nx-os | 7.3\(8\)n1\(0.809\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(2a\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(3\) | All | All | All |
| Operating System | Cisco | Nx-os | 8.4\(3\)s19 | All | All | All |
| Operating System | Cisco | Nx-os | 9.3\(3\)idi9\(0.569\) | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.