Description
A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper initialization of a buffer. An attacker could exploit this vulnerability via any of the following methods: An authenticated, remote attacker could access the LLDP neighbor table via either the CLI or SNMP while the device is in a specific state. An unauthenticated, adjacent attacker could corrupt the LLDP neighbor table by injecting specific LLDP frames into the network and then waiting for an administrator of the device or a network management system (NMS) managing the device to retrieve the LLDP neighbor table of the device via either the CLI or SNMP. An authenticated, adjacent attacker with SNMP read-only credentials or low privileges on the device CLI could corrupt the LLDP neighbor table by injecting specific LLDP frames into the network and then accessing the LLDP neighbor table via either the CLI or SNMP. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a reload of the device.
Published: 2021-09-23
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-21353 A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper initialization of a buffer. An attacker could exploit this vulnerability via any of the following methods: An authenticated, remote attacker could access the LLDP neighbor table via either the CLI or SNMP while the device is in a specific state. An unauthenticated, adjacent attacker could corrupt the LLDP neighbor table by injecting specific LLDP frames into the network and then waiting for an administrator of the device or a network management system (NMS) managing the device to retrieve the LLDP neighbor table of the device via either the CLI or SNMP. An authenticated, adjacent attacker with SNMP read-only credentials or low privileges on the device CLI could corrupt the LLDP neighbor table by injecting specific LLDP frames into the network and then accessing the LLDP neighbor table via either the CLI or SNMP. A successful exploit could allow the attacker to cause the affected device to crash, resulting in a reload of the device.
History

Thu, 07 Nov 2024 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Cisco 1000 Integrated Services Router 1100-4g\/6g Integrated Services Router 1100-4p Integrated Services Router 1100-8p Integrated Services Router 1100 Integrated Services Router 1101-4p Integrated Services Router 1101 Integrated Services Router 1109-2p Integrated Services Router 1109-4p Integrated Services Router 1109 Integrated Services Router 1111x-8p Integrated Services Router 1111x Integrated Services Router 111x Integrated Services Router 1120 Integrated Services Router 1160 Integrated Services Router 4000 Integrated Services Router 4221 Integrated Services Router 4321 Integrated Services Router 4331 Integrated Services Router 4351 Integrated Services Router 4431 Integrated Services Router 4451-x Integrated Services Router 4451 Integrated Services Router 4461 Integrated Services Router Catalyst 3650-12x48fd-e Catalyst 3650-12x48fd-l Catalyst 3650-12x48fd-s Catalyst 3650-12x48uq Catalyst 3650-12x48uq-e Catalyst 3650-12x48uq-l Catalyst 3650-12x48uq-s Catalyst 3650-12x48ur Catalyst 3650-12x48ur-e Catalyst 3650-12x48ur-l Catalyst 3650-12x48ur-s Catalyst 3650-12x48uz Catalyst 3650-12x48uz-e Catalyst 3650-12x48uz-l Catalyst 3650-12x48uz-s Catalyst 3650-24pd Catalyst 3650-24pd-e Catalyst 3650-24pd-l Catalyst 3650-24pd-s Catalyst 3650-24pdm Catalyst 3650-24pdm-e Catalyst 3650-24pdm-l Catalyst 3650-24pdm-s Catalyst 3650-24ps-e Catalyst 3650-24ps-l Catalyst 3650-24ps-s Catalyst 3650-24td-e Catalyst 3650-24td-l Catalyst 3650-24td-s Catalyst 3650-24ts-e Catalyst 3650-24ts-l Catalyst 3650-24ts-s Catalyst 3650-48fd-e Catalyst 3650-48fd-l Catalyst 3650-48fd-s Catalyst 3650-48fq Catalyst 3650-48fq-e Catalyst 3650-48fq-l Catalyst 3650-48fq-s Catalyst 3650-48fqm Catalyst 3650-48fqm-e Catalyst 3650-48fqm-l Catalyst 3650-48fqm-s Catalyst 3650-48fs-e Catalyst 3650-48fs-l Catalyst 3650-48fs-s Catalyst 3650-48pd-e Catalyst 3650-48pd-l Catalyst 3650-48pd-s Catalyst 3650-48pq-e Catalyst 3650-48pq-l Catalyst 3650-48pq-s Catalyst 3650-48ps-e Catalyst 3650-48ps-l Catalyst 3650-48ps-s Catalyst 3650-48td-e Catalyst 3650-48td-l Catalyst 3650-48td-s Catalyst 3650-48tq-e Catalyst 3650-48tq-l Catalyst 3650-48tq-s Catalyst 3650-48ts-e Catalyst 3650-48ts-l Catalyst 3650-48ts-s Catalyst 3650-8x24pd-e Catalyst 3650-8x24pd-l Catalyst 3650-8x24pd-s Catalyst 3650-8x24uq Catalyst 3650-8x24uq-e Catalyst 3650-8x24uq-l Catalyst 3650-8x24uq-s Catalyst 3850 Catalyst 3850-12s-e Catalyst 3850-12s-s Catalyst 3850-12x48u Catalyst 3850-12xs-e Catalyst 3850-12xs-s Catalyst 3850-16xs-e Catalyst 3850-16xs-s Catalyst 3850-24p-e Catalyst 3850-24p-l Catalyst 3850-24p-s Catalyst 3850-24pw-s Catalyst 3850-24s-e Catalyst 3850-24s-s Catalyst 3850-24t-e Catalyst 3850-24t-l Catalyst 3850-24t-s Catalyst 3850-24u Catalyst 3850-24u-e Catalyst 3850-24u-l Catalyst 3850-24u-s Catalyst 3850-24xs Catalyst 3850-24xs-e Catalyst 3850-24xs-s Catalyst 3850-24xu Catalyst 3850-24xu-e Catalyst 3850-24xu-l Catalyst 3850-24xu-s Catalyst 3850-32xs-e Catalyst 3850-32xs-s Catalyst 3850-48f-e Catalyst 3850-48f-l Catalyst 3850-48f-s Catalyst 3850-48p-e Catalyst 3850-48p-l Catalyst 3850-48p-s Catalyst 3850-48pw-s Catalyst 3850-48t-e Catalyst 3850-48t-l Catalyst 3850-48t-s Catalyst 3850-48u Catalyst 3850-48u-e Catalyst 3850-48u-l Catalyst 3850-48u-s Catalyst 3850-48xs Catalyst 3850-48xs-e Catalyst 3850-48xs-f-e Catalyst 3850-48xs-f-s Catalyst 3850-48xs-s Catalyst 3850-nm-2-40g Catalyst 3850-nm-8-10g Catalyst 9200 Catalyst 9300 Catalyst 9300-24p-a Catalyst 9300-24p-e Catalyst 9300-24s-a Catalyst 9300-24s-e Catalyst 9300-24t-a Catalyst 9300-24t-e Catalyst 9300-24u-a Catalyst 9300-24u-e Catalyst 9300-24ux-a Catalyst 9300-24ux-e Catalyst 9300-48p-a Catalyst 9300-48p-e Catalyst 9300-48s-a Catalyst 9300-48s-e Catalyst 9300-48t-a Catalyst 9300-48t-e Catalyst 9300-48u-a Catalyst 9300-48u-e Catalyst 9300-48un-a Catalyst 9300-48un-e Catalyst 9300-48uxm-a Catalyst 9300-48uxm-e Catalyst 9300l Catalyst 9300l-24p-4g-a Catalyst 9300l-24p-4g-e Catalyst 9300l-24p-4x-a Catalyst 9300l-24p-4x-e Catalyst 9300l-24t-4g-a Catalyst 9300l-24t-4g-e Catalyst 9300l-24t-4x-a Catalyst 9300l-24t-4x-e Catalyst 9300l-48p-4g-a Catalyst 9300l-48p-4g-e Catalyst 9300l-48p-4x-a Catalyst 9300l-48p-4x-e Catalyst 9300l-48t-4g-a Catalyst 9300l-48t-4g-e Catalyst 9300l-48t-4x-a Catalyst 9300l-48t-4x-e Catalyst 9300l Stack Catalyst 9400 Catalyst 9407r Catalyst 9410r Catalyst 9500 Catalyst 9600 Catalyst 9800 Catalyst 9800-40 Catalyst 9800-80 Catalyst 9800-cl Catalyst 9800-l Catalyst 9800-l-c Catalyst 9800-l-f Csr 1000v Ios Ios Xe
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-07T21:59:20.710Z

Reserved: 2021-06-15T00:00:00.000Z

Link: CVE-2021-34703

cve-icon Vulnrichment

Updated: 2024-08-04T00:19:48.150Z

cve-icon NVD

Status : Modified

Published: 2021-09-23T03:15:16.970

Modified: 2024-11-21T06:10:59.470

Link: CVE-2021-34703

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses