CVE-2021-1440 — Reachable Assertion in Cisco IOS XR

CWE-617 — Reachable Assertion4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.7%
top 26.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOS XRCisco IOS XR Software
Timeline
PublishedNov 18

Description

A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Border Gateway Protocol (BGP) process to crash, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of a specific RPKI to Router (RTR) Protocol packet header. An attacker could exploit this vulnerability by compromising the RPKI validator server and sending a specifica…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 2.2 | Impact: 4.0

Affected Packages2 packages

▶CVEListV5cisco/cisco_ios_xr_software21 versions+20
▶NVDcisco/ios_xr4.3.0 — 7.3.1

🔴Vulnerability Details

2
GHSA
GHSA-g8j6-3mwg-7x4g: A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR Software could allow an unauthenticated↗2024-11-18
▶
CVEList
Cisco IOS XR Software BGP Resource Public Key Infrastructure Denial of Service Vulnerability↗2024-11-18
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XR Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability↗2021-09-08
▶