CVE-2021-1446 — Improper Check for Unusual or Exceptional Conditions in Cisco IOS XE Software
Severity
7.5HIGHNVD
CNA8.6
EPSS
0.3%
top 48.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 24
Latest updateMay 24
Description
A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected device inspects certain DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through an affected device that is performing NAT for DNS packets. A successful exploit c…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-m3m6-h5x2-mhf5: A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allo↗2022-05-24
CVEList▶
Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability↗2021-03-24
📋Vendor Advisories
1Cisco▶
Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability↗2021-03-24