Summary

• Cisco released its semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication on August 25, 2021. In direct response to customer feedback, Cisco releases bundles of Cisco FXOS and NX-OS Software Security Advisories on the fourth Wednesday of the month in February and August of each calendar year.

  The August 25, 2021, release of the Cisco FXOS and NX-OS Software Security Advisory Bundled Publication includes 9 Cisco Security Advisories that describe 9 vulnerabilities in Cisco NX-OS Software and Cisco UCS Software. Cisco has released software updates that address these vulnerabilities.

  Of these advisories, four have a Security Impact Rating (SIR) of High and five have a SIR of Medium.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score	Affected Cisco Platforms
  cisco-sa-n9kaci-tcp-dos-YXukt6gM Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability	CVE-2021-1586	High	8.6	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-n9kaci-queue-wedge-cLDDEfKF Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability	CVE-2021-1523	High	8.6	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-nxos-mpls-oam-dos-sGO9x5GM Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability	CVE-2021-1588	High	8.6	Nexus 3000 Series Switches Nexus 7000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode
  cisco-sa-nxos-ngoam-dos-LTDb9Hv Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability	CVE-2021-1587	High	8.6	Nexus 3000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode
  cisco-sa-naci-afr-UtjfO2D7 Cisco Nexus 9000 Series Fabric Switches ACI Mode Arbitrary File Read Vulnerability	CVE-2021-1583	Medium	4.4	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-naci-mdvul-vrKVgNU Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege Escalation Vulnerability	CVE-2021-1584	Medium	6	Nexus 9000 Series Fabric Switches in ACI mode
  cisco-sa-nexus-acl-vrvQYPVe Cisco Nexus 9500 Series Switches Access Control List Bypass Vulnerability	CVE-2021-1591	Medium	5.8	Nexus 9500 Series Switches
  cisco-sa-nxos-login-blockfor-RwjGVEcu Cisco NX-OS Software system login block-for Denial of Service Vulnerability	CVE-2021-1590	Medium	5.3	MDS 9000 Series Multilayer Switches Nexus 3000 Series Switches Nexus 5500 Platform Switches Nexus 5600 Platform Switches Nexus 6000 Series Switches Nexus 7000 Series Switches Nexus 9000 Series Switches in standalone NX-OS mode UCS 6200 Series Fabric Interconnects UCS 6300 Series Fabric Interconnects
  cisco-sa-ucs-ssh-dos-MgvmyrQy Cisco UCS Manager Software SSH Sessions Denial of Service Vulnerability	CVE-2021-1592	Medium	4.3	UCS 6400 Series Fabric Interconnects

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A