Summary

• The February 24, 2021, release of the Cisco FXOS and NX-OS Software Security Advisory Bundled Publication includes five Cisco Security Advisories that describe five vulnerabilities in Cisco FXOS Software, Cisco NX-OS Software, and Cisco UCS Software. Cisco has released software updates that address these vulnerabilities.

  Of these advisories, four have a Security Impact Rating (SIR) of High. One has a SIR of Critical.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score	Affected Cisco Platforms
  cisco-sa-3000-9000-fileaction-QtLzDRy2 Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability	CVE-2021-1361	Critical	9.8	Nexus 3000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode
  cisco-sa-n9kaci-bgp-De9dPKSK Cisco Nexus 9000 Series Fabric Switches ACI Mode BGP Route Installation Denial of Service Vulnerability	CVE-2021-1230	High	8.6	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-n9kaci-unauth-access-5PWzDx2w Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability	CVE-2021-1228	High	7.4	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-nxos-ipv6-netstack-edXPGV7K Cisco NX-OS Software IPv6 Netstack Denial of Service Vulnerability	CVE-2021-1387	High	8.6	Nexus 3000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode UCS 6400 Series Fabric Interconnects
  cisco-sa-nxos-nxapi-csrf-wRMzWL9z Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability	CVE-2021-1227	High	8.1	MDS 9000 Series Multilayer Switches Nexus 3000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A