CVE-2021-34767

Published on: 09/22/2021 12:00:00 AM UTC

Last Modified on: 10/13/2021 12:57:00 PM UTC

CVE-2021-34767 - advisory for cisco-sa-ewlc-ipv6-dos-NMYeCnZv

Source: Mitre Source: Nist Print: PDF PDF
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Certain versions of Catalyst 9800 from Cisco contain the following vulnerability:

A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service (DoS) condition for that VLAN. The vulnerability is due to a logic error when processing specific link-local IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that would flow inbound through the wired interface of an affected device. A successful exploit could allow the attacker to cause traffic drops in the affected VLAN, thus triggering the DoS condition.

  • CVE-2021-34767 has been assigned by URL Logo [email protected] to track the vulnerability - currently rated as HIGH severity.
  • The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
  • Affected Vendor/Software: URL Logo Cisco - Cisco IOS XE Software version n/a

CVSS3 Score: 7.4 - HIGH

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
ADJACENT_NETWORK LOW NONE NONE
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
CHANGED NONE NONE HIGH

CVSS2 Score: 3.3 - LOW

Access
Vector
Access
Complexity
Authentication
ADJACENT_NETWORK LOW NONE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
NONE NONE PARTIAL

CVE References

Description Tags Link
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability tools.cisco.com
text/html
URL Logo CISCO 20210922 Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability

Related QID Numbers

  • 317052 Cisco Internetwork Operating System (IOS) XE Software for Catalyst 9800 Series Wireless Controllers Internet Protocol (IPv6) Denial of Service (DoS) Vulnerability (cisco-sa-ewlc-ipv6-dos-NMYeCnZv)

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
HardwareCiscoCatalyst 9800-AllAllAll
HardwareCiscoCatalyst 9800-40-AllAllAll
HardwareCiscoCatalyst 9800-80-AllAllAll
HardwareCiscoCatalyst 9800-cl-AllAllAll
HardwareCiscoCatalyst 9800-l-AllAllAll
HardwareCiscoCatalyst 9800-l-c-AllAllAll
HardwareCiscoCatalyst 9800-l-f-AllAllAll
HardwareCiscoCatalyst 9800 Embedded Wireless Controller-AllAllAll
Operating
System
CiscoIos XeAllAllAllAll
Operating
System
CiscoIos Xe16.10.1AllAllAll
Operating
System
CiscoIos Xe16.10.1aAllAllAll
Operating
System
CiscoIos Xe16.10.1bAllAllAll
Operating
System
CiscoIos Xe16.10.1cAllAllAll
Operating
System
CiscoIos Xe16.10.1dAllAllAll
Operating
System
CiscoIos Xe16.10.1eAllAllAll
Operating
System
CiscoIos Xe16.10.1fAllAllAll
Operating
System
CiscoIos Xe16.10.1gAllAllAll
Operating
System
CiscoIos Xe16.10.1sAllAllAll
Operating
System
CiscoIos Xe16.10.2AllAllAll
Operating
System
CiscoIos Xe16.10.3AllAllAll
Operating
System
CiscoIos Xe16.11.1AllAllAll
Operating
System
CiscoIos Xe16.11.1aAllAllAll
Operating
System
CiscoIos Xe16.11.1bAllAllAll
Operating
System
CiscoIos Xe16.11.1cAllAllAll
Operating
System
CiscoIos Xe16.11.1sAllAllAll
Operating
System
CiscoIos Xe16.11.2AllAllAll
Operating
System
CiscoIos Xe16.12.1AllAllAll
Operating
System
CiscoIos Xe16.12.1aAllAllAll
Operating
System
CiscoIos Xe16.12.1cAllAllAll
Operating
System
CiscoIos Xe16.12.1sAllAllAll
Operating
System
CiscoIos Xe16.12.1tAllAllAll
Operating
System
CiscoIos Xe16.12.1wAllAllAll
Operating
System
CiscoIos Xe16.12.1xAllAllAll
Operating
System
CiscoIos Xe16.12.1yAllAllAll
Operating
System
CiscoIos Xe16.12.1zAllAllAll
Operating
System
CiscoIos Xe16.12.1z1AllAllAll
Operating
System
CiscoIos Xe16.12.1zaAllAllAll
Operating
System
CiscoIos Xe16.12.2AllAllAll
Operating
System
CiscoIos Xe16.12.2aAllAllAll
Operating
System
CiscoIos Xe16.12.2sAllAllAll
Operating
System
CiscoIos Xe16.12.2tAllAllAll
Operating
System
CiscoIos Xe16.12.3AllAllAll
Operating
System
CiscoIos Xe16.12.3aAllAllAll
Operating
System
CiscoIos Xe16.12.3sAllAllAll
Operating
System
CiscoIos Xe16.12.4AllAllAll
Operating
System
CiscoIos Xe16.12.4aAllAllAll
Operating
System
CiscoIos Xe16.7.1AllAllAll
Operating
System
CiscoIos Xe16.7.1aAllAllAll
Operating
System
CiscoIos Xe16.7.1bAllAllAll
Operating
System
CiscoIos Xe16.7.2AllAllAll
Operating
System
CiscoIos Xe16.7.3AllAllAll
Operating
System
CiscoIos Xe16.7.4AllAllAll
Operating
System
CiscoIos Xe16.8.1AllAllAll
Operating
System
CiscoIos Xe16.8.1aAllAllAll
Operating
System
CiscoIos Xe16.8.1bAllAllAll
Operating
System
CiscoIos Xe16.8.1cAllAllAll
Operating
System
CiscoIos Xe16.8.1dAllAllAll
Operating
System
CiscoIos Xe16.8.1eAllAllAll
Operating
System
CiscoIos Xe16.8.1sAllAllAll
Operating
System
CiscoIos Xe16.8.2AllAllAll
Operating
System
CiscoIos Xe16.8.3AllAllAll
Operating
System
CiscoIos Xe16.9.1AllAllAll
Operating
System
CiscoIos Xe16.9.1aAllAllAll
Operating
System
CiscoIos Xe16.9.1bAllAllAll
Operating
System
CiscoIos Xe16.9.1cAllAllAll
Operating
System
CiscoIos Xe16.9.1dAllAllAll
Operating
System
CiscoIos Xe16.9.1sAllAllAll
Operating
System
CiscoIos Xe16.9.2AllAllAll
Operating
System
CiscoIos Xe16.9.2aAllAllAll
Operating
System
CiscoIos Xe16.9.2sAllAllAll
Operating
System
CiscoIos Xe16.9.3AllAllAll
Operating
System
CiscoIos Xe16.9.3aAllAllAll
Operating
System
CiscoIos Xe16.9.3hAllAllAll
Operating
System
CiscoIos Xe16.9.3sAllAllAll
Operating
System
CiscoIos Xe16.9.4AllAllAll
Operating
System
CiscoIos Xe16.9.4cAllAllAll
Operating
System
CiscoIos Xe16.9.5AllAllAll
Operating
System
CiscoIos Xe16.9.5fAllAllAll
Operating
System
CiscoIos Xe16.9.6AllAllAll
Operating
System
CiscoIos Xe16.9.7AllAllAll
Operating
System
CiscoIos Xe17.1.1AllAllAll
Operating
System
CiscoIos Xe17.1.1aAllAllAll
Operating
System
CiscoIos Xe17.1.1sAllAllAll
Operating
System
CiscoIos Xe17.1.1tAllAllAll
Operating
System
CiscoIos Xe17.1.2AllAllAll
Operating
System
CiscoIos Xe17.1.3AllAllAll
Operating
System
CiscoIos Xe17.2.1AllAllAll
Operating
System
CiscoIos Xe17.2.1aAllAllAll
Operating
System
CiscoIos Xe17.2.1rAllAllAll
Operating
System
CiscoIos Xe17.2.1vAllAllAll
Operating
System
CiscoIos Xe17.2.2AllAllAll
Operating
System
CiscoIos Xe17.2.3AllAllAll
Operating
System
CiscoIos Xe17.3.1AllAllAll
Operating
System
CiscoIos Xe17.3.1aAllAllAll
Operating
System
CiscoIos Xe17.3.1wAllAllAll
Operating
System
CiscoIos Xe17.3.1xAllAllAll
Operating
System
CiscoIos Xe17.3.1zAllAllAll
Operating
System
CiscoIos Xe17.3.2AllAllAll
Operating
System
CiscoIos Xe17.3.2aAllAllAll
Operating
System
CiscoIos Xe3.15.1xbsAllAllAll
Operating
System
CiscoIos Xe3.15.2xbsAllAllAll
  • cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-l-c:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800-l-f:-:*:*:*:*:*:*:*:
  • cpe:2.3:h:cisco:catalyst_9800_embedded_wireless_controller:-:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*:
  • cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*:

Social Mentions

Source Title Posted (UTC)
Twitter Icon @management_sun IT Risk:Cisco.(ALERT)IOS XE Softwareに複数の脆弱性 CVE-2021-34770 CVE-2021-34769 CVE-2021-34768 CVE-2021-34767 CVE-2021-34… twitter.com/i/web/status/1… 2021-09-23 01:23:35
Twitter Icon @CVEreport CVE-2021-34767 : A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisc… twitter.com/i/web/status/1… 2021-09-23 02:44:17
Twitter Icon @threatmeter CVE-2021-34767 A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Ca… twitter.com/i/web/status/1… 2021-09-24 07:09:48
© CVE.report 2021 Twitter Nitter Twitter Viewer |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report