What is CVE-2021-1624?

CVE-2021-1624 is a high-severity vulnerability in Cisco Asr_1000, classified under CWE-399. CVSS score: 8.6/10. Published 2021-09-23.

How severe is CVE-2021-1624?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Cisco Asr_1000

CVE-2021-1624

A vulnerability in the Rate Limiting Network Address Translation (NAT) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization in the Cisco QuantumFlow Processor of an affected device…

EPSS: 0.013 (66.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco Asr_1000
Cisco Asr_1000-esp100
Cisco Asr_1000-x
Cisco Asr_1001
Cisco Asr_1001-hx
Cisco Asr_1001-hx_r
Cisco Asr_1001-x
Cisco Asr_1001-x_r
Cisco Asr_1002
Cisco Asr_1002-hx

Weakness classification (CWE)

CWE-399

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2021-1624?: CVE-2021-1624 is a high-severity vulnerability in Cisco Asr_1000, classified under CWE-399. CVSS score: 8.6/10. Published 2021-09-23.
How severe is CVE-2021-1624?: High severity. CVSS v3 base score is 8.6 out of 10.