CVE-2021-1587 Details
Description
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific packets with a Transparent Interconnection of Lots of Links (TRILL) OAM EtherType. An attacker could exploit this vulnerability by sending crafted packets, including the TRILL OAM EtherType of 0x8902, to a device that is part of a VXLAN Ethernet VPN (EVPN) fabric. A successful exploit could allow the attacker to cause an affected device to experience high CPU usage and consume excessive system resources, which may result in overall control plane instability and cause the affected device to reload. Note: The NGOAM feature is disabled by default.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 7, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ngoam-dos-LTDb9Hv | CVE | PatchVendor Advisory |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ngoam-dos-LTDb9Hv | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-436 | Interpretation Conflict | [email protected] |
| CWE-115 | Misinterpretation of Input | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| cisco nx-os | All versions |
CPE
Remediation
| |
| cisco nexus 3000 | All versions |
CPE
Remediation
| |
| cisco nexus 3048 | All versions |
CPE
Remediation
| |
| cisco nexus 31108pc-v | All versions |
CPE
Remediation
| |
| cisco nexus 31108tc-v | All versions |
CPE
Remediation
| |
| cisco nexus 31128pq | All versions |
CPE
Remediation
| |
| cisco nexus 3132c-z | All versions |
CPE
Remediation
| |
| cisco nexus 3132q-v | All versions |
CPE
Remediation
| |
| cisco nexus 3132q-x/3132q-xl | All versions |
CPE
Remediation
| |
| cisco nexus 3164q | All versions |
CPE
Remediation
| |
| cisco nexus 3172pq/pq-xl | All versions |
CPE
Remediation
| |
| cisco nexus 3172tq-xl | All versions |
CPE
Remediation
| |
| cisco nexus 3232c | All versions |
CPE
Remediation
| |
| cisco nexus 3264c-e | All versions |
CPE
Remediation
| |
| cisco nexus 3264q | All versions |
CPE
Remediation
| |
| cisco nexus 3408-s | All versions |
CPE
Remediation
| |
| cisco nexus 34180yc | All versions |
CPE
Remediation
| |
| cisco nexus 3432d-s | All versions |
CPE
Remediation
| |
| cisco nexus 3464c | All versions |
CPE
Remediation
| |
| cisco nexus 3524-x/xl | All versions |
CPE
Remediation
| |
| cisco nexus 3548-x/xl | All versions |
CPE
Remediation
| |
| cisco nexus 36180yc-r | All versions |
CPE
Remediation
| |
| cisco nexus 3636c-r | All versions |
CPE
Remediation
| |
| cisco nexus 9000v | All versions |
CPE
Remediation
| |
| cisco nexus 92160yc-x | All versions |
CPE
Remediation
| |
| cisco nexus 92300yc | All versions |
CPE
Remediation
| |
| cisco nexus 92304qc | All versions |
CPE
Remediation
| |
| cisco nexus 92348gc-x | All versions |
CPE
Remediation
| |
| cisco nexus 9236c | All versions |
CPE
Remediation
| |
| cisco nexus 9272q | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-ex-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93108tc-fx3p | All versions |
CPE
Remediation
| |
| cisco nexus 93120tx | All versions |
CPE
Remediation
| |
| cisco nexus 93128tx | All versions |
CPE
Remediation
| |
| cisco nexus 9316d-gx | All versions |
CPE
Remediation
| |
| cisco nexus 93180lc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-ex | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-ex-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx-24 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx3 | All versions |
CPE
Remediation
| |
| cisco nexus 93180yc-fx3s | All versions |
CPE
Remediation
| |
| cisco nexus 93216tc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 93240yc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9332c | All versions |
CPE
Remediation
| |
| cisco nexus 9332pq | All versions |
CPE
Remediation
| |
| cisco nexus 93360yc-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9336c-fx2 | All versions |
CPE
Remediation
| |
| cisco nexus 9336c-fx2-e | All versions |
CPE
Remediation
| |
| cisco nexus 9348gc-fxp | All versions |
CPE
Remediation
| |
| cisco nexus 93600cd-gx | All versions |
CPE
Remediation
| |
| cisco nexus 9364c | All versions |
CPE
Remediation
| |
| cisco nexus 9364c-gx | All versions |
CPE
Remediation
| |
| cisco nexus 9372px | All versions |
CPE
Remediation
| |
| cisco nexus 9372px-e | All versions |
CPE
Remediation
| |
| cisco nexus 9372tx | All versions |
CPE
Remediation
| |
| cisco nexus 9372tx-e | All versions |
CPE
Remediation
| |
| cisco nexus 9396px | All versions |
CPE
Remediation
| |
| cisco nexus 9396tx | All versions |
CPE
Remediation
| |
| cisco nexus 9508 | All versions |
CPE
Remediation
| |
Change History
7 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Sep 2, 2021 | Reanalysis | [email protected] |
| Sep 2, 2021 | Initial Analysis | [email protected] |