What is CVE-2021-1228?

CVE-2021-1228 is a high-severity vulnerability in Cisco Nx-os System Software In Aci Mode 11.0(1b), classified under Improper Access Control. CVSS score: 7.4/10. Published 2021-02-24.

How severe is CVE-2021-1228?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Cisco Nx-os System Software In Aci Mode 11.0(1b)

CVE-2021-1228

A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to bypass security val…

EPSS: 0.004 (29.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.

Affected products

Cisco Nx-os System Software In Aci Mode 11.0(1b) — versions n/a
Cisco Nexus_9000v
Cisco Nexus_92160yc-x
Cisco Nexus_92300yc
Cisco Nexus_92304qc
Cisco Nexus_92348gc-x
Cisco Nexus_9236c
Cisco Nexus_9272q
Cisco Nexus_93108tc-ex
Cisco Nexus_93108tc-ex-24

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1228?: CVE-2021-1228 is a high-severity vulnerability in Cisco Nx-os System Software In Aci Mode 11.0(1b), classified under Improper Access Control. CVSS score: 7.4/10. Published 2021-02-24.
How severe is CVE-2021-1228?: High severity. CVSS v3 base score is 7.4 out of 10.