VDB
CVE-2021-1591
CVE-2021-1591
PUBLISHED
CVSS 5.800000190734863 MEDIUM
A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass access control list (ACL) rules that are configured on an affected device. This vulnerability is due to oversubscription of resources that occurs when applying ACLs to port channel interfaces. An attacker could exploit this vulnerability by attempting to access network resources that are protected by the ACL. A successful exploit could allow the attacker to access network resources that would be protected by the ACL that was applied on the port channel interface.
EPSS 0.29% · 52.9th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.29%
52.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | nx-os | * |
| Cisco | Cisco NX-OS Software | n/a |
Exploit Intelligence
Timeline
- Aug 25, 2021 CVE Published
- Aug 26, 2021 EPSS Score
- Sep 4, 2021 EPSS Score
- Oct 10, 2021 EPSS Score
- Dec 20, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 17, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jun 13, 2022 EPSS Score
- Aug 11, 2022 EPSS Score
- Oct 8, 2022 EPSS Score