5
CVSSv2

CVE-2021-1377

Published: 24/03/2021 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.8 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote malicious user to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subnets. This vulnerability exists because ARP entries are mismanaged. An attacker could exploit this vulnerability by continuously sending traffic that results in incomplete ARP entries. A successful exploit could allow the malicious user to cause ARP requests on the device to be unsuccessful for legitimate hosts, resulting in a denial of service (DoS) condition.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios 15.5\\(3\\)m4a

cisco ios 15.4\\(1\\)sy

cisco ios xe 3.6.6e

cisco ios 15.2\\(2\\)e6

cisco ios xe 3.16.4s

cisco ios 15.6\\(3\\)m3

cisco ios 15.5\\(3\\)s5

cisco ios 15.2\\(3\\)e5

cisco ios 15.2\\(5a\\)e1

cisco ios 15.7\\(3\\)m

cisco ios xe 3.8.4e

cisco ios 15.6\\(3\\)m2a

cisco ios xe 3.6.7e

cisco ios 15.5\\(3\\)s4

cisco ios xe 16.6.1

cisco ios xe 3.16.6s

cisco ios 15.4\\(1\\)sy2

cisco ios xe 3.16.5s

cisco ios xe 3.7.5e

cisco ios 15.4\\(1\\)sy1

cisco ios 15.2\\(5\\)e2

cisco ios 15.5\\(3\\)m6

cisco ios 15.2\\(4\\)e4

cisco ios xe 3.16.4ds

cisco ios 15.5\\(1\\)sy

cisco ios xe 16.4.1

cisco ios 15.2\\(5\\)ex

cisco ios 15.6\\(3\\)m2

cisco ios 15.5\\(3\\)m4

cisco ios xe 3.16.4as

cisco ios 15.5\\(3\\)m5

cisco ios xe 3.16.4bs

cisco ios 15.2\\(2\\)e7

cisco ios 15.2\\(5\\)e1

cisco ios xe 3.9.1e

cisco ios xe 16.3.2

cisco ios xe 16.3.3

cisco ios 15.2\\(5\\)e2b

cisco ios 15.5\\(1\\)sy1

cisco ios xe 3.16.6bs

cisco ios xe 16.5.1

cisco ios xe 16.5.1a

cisco ios xe 16.3.4

cisco ios 15.2\\(5\\)e2c

cisco ios xe 3.9.2e

cisco ios xe 16.5.1b

cisco ios xe 16.4.2

cisco ios xe 16.3.5b

cisco ios xe 16.3.6

cisco ios xe 16.6.3

cisco ios 15.5\\(3\\)m4b

cisco ios 15.5\\(3\\)m4c

cisco ios 15.5\\(3\\)m6a

cisco ios 15.6\\(3\\)m3a

cisco ios 15.7\\(3\\)m0a

cisco ios 15.7\\(3\\)m1

cisco ios 15.7\\(3\\)m2

cisco ios xe 16.8.1

cisco ios xe 16.7.1

cisco ios xe 16.6.2

cisco ios xe 16.9.1

cisco ios xe 3.8.5e

cisco ios xe 3.16.4gs

cisco ios 15.5\\(3\\)s6a

cisco ios xe 3.16.4cs

cisco ios 15.5\\(3\\)s6b

cisco ios xe 3.16.5bs

cisco ios xe 3.16.4es

cisco ios 15.4\\(1\\)sy3

cisco ios xe 16.3.5

cisco ios 12.2\\(6\\)i1

cisco ios xe 16.5.2

cisco ios 15.2\\(4\\)ea6

cisco ios xe 3.9.2be

cisco ios xe 3.16.5as

cisco ios 15.2\\(4\\)e5a

cisco ios xe 3.8.5ae

cisco ios 15.5\\(3\\)s6

cisco ios 15.2\\(4\\)e5

cisco ios xe 16.8.1a

cisco ios xe 16.8.1s

cisco ios xe 16.8.1b

cisco ios xe 16.8.2

cisco ios xe 16.7.2

cisco ios xe 16.8.1d

cisco ios xe 16.7.3

cisco ios xe 16.7.1a

cisco ios xe 16.7.1b

cisco ios xe 16.8.1c

cisco ios xe 16.8.1e

cisco ios 15.2\\(4\\)ea9

cisco ios xe 16.4.3

cisco ios 15.6\\(3\\)m4

cisco ios xe 3.6.8e

cisco ios xe 3.10.0ce

cisco ios xe 3.6.7ae

cisco ios 15.2\\(4\\)e6

cisco ios 15.2\\(2\\)e7b

cisco ios xe 3.10.0e

cisco ios 15.2\\(6\\)e1

cisco ios 15.2\\(6\\)e

cisco ios 15.2\\(4\\)ea8

cisco ios 15.2\\(6\\)e0c

cisco ios xe 16.9.1s

cisco ios xe 3.16.7as

cisco ios xe 3.16.7s

cisco ios xe 16.9.1c

cisco ios xe 16.9.1b

cisco ios 15.2\\(2\\)e8

cisco ios xe 3.16.7bs

cisco ios 15.2\\(6\\)e0a

cisco ios 15.5\\(3\\)s7

cisco ios xe 3.6.7be

cisco ios xe 3.8.6e

cisco ios xe 16.5.3

cisco ios xe 3.10.1e

cisco ios 15.2\\(6\\)e1a

cisco ios xe 3.10.1ae

cisco ios xe 3.10.1se

cisco ios 15.2\\(6\\)e1s

cisco ios xe 3.6.10e

cisco ios xe 16.3.7

cisco ios xe 16.3.8

cisco ios xe 16.9.1d

cisco ios 15.7\\(3\\)m3

cisco ios xe 16.6.4s

cisco ios 15.6\\(3\\)m5

cisco ios 15.8\\(3\\)m0a

cisco ios xe 16.6.4

cisco ios xe 3.16.8s

cisco ios 15.8\\(3\\)m

cisco ios 15.8\\(3\\)m0b

cisco ios 15.5\\(3\\)m7

cisco ios 15.5\\(3\\)m8

cisco ios xe 3.10.2e

cisco ios xe 3.6.9e

cisco ios xe 3.8.7e

cisco ios 15.2\\(2\\)e10

cisco ios 15.2\\(2\\)e9

cisco ios xe 3.6.9ae

cisco ios 15.2\\(2\\)e9a

cisco ios 15.2\\(4\\)ea7

cisco ios xe 16.10.1

cisco ios xe 16.7.4

cisco ios xe 16.9.1a

cisco ios xe 16.9.2a

cisco ios xe 16.9.2

cisco ios xe 16.6.4a

cisco ios 15.2\\(6\\)e2a

cisco ios 15.2\\(6\\)e2b

cisco ios 15.5\\(3\\)s8

cisco ios 15.2\\(4\\)e7

cisco ios 15.5\\(1\\)sy2

cisco ios 15.2\\(6\\)e2

cisco ios 15.4\\(1\\)sy4

cisco ios xe 3.16.10s

cisco ios xe 16.12.1

cisco ios 15.5\\(1\\)sy4

cisco ios 15.5\\(3\\)s10

cisco ios xe 16.6.5

cisco ios xe 16.11.1

cisco ios xe 17.1.1

cisco ios 15.2\\(7\\)e

cisco ios xe 16.11.1a

cisco ios xe 16.12.1c

cisco ios xe 16.12.1t

cisco ios xe 16.11.2

cisco ios xe 16.12.1s

cisco ios xe 16.12.1a

cisco ios xe 16.12.1x

cisco ios xe 16.11.1c

cisco ios xe 16.11.1b

cisco ios xe 16.11.1s

cisco ios xe 16.12.1w

cisco ios xe 16.10.1s

cisco ios xe 16.10.1d

cisco ios xe 16.9.2s

cisco ios xe 3.11.3e

cisco ios xe 3.11.0e

cisco ios xe 3.16.9s

cisco ios xe 16.6.6

cisco ios xe 16.9.3h

cisco ios xe 16.6.5b

cisco ios xe 16.6.5a

cisco ios xe 3.8.8e

cisco ios xe 16.3.9

cisco ios xe 16.9.3a

cisco ios xe 16.10.1a

cisco ios xe 3.10.3e

cisco ios xe 16.10.1f

cisco ios xe 16.10.1g

cisco ios xe 16.10.2

cisco ios xe 16.9.3

cisco ios xe 16.12.1y

cisco ios xe 16.10.1e

cisco ios xe 16.10.1b

cisco ios xe 16.8.3

cisco ios xe 16.9.3s

cisco ios xe 16.10.1c

cisco ios xe 16.9.4

cisco ios 15.2\\(7\\)e0s

cisco ios 15.8\\(3\\)m3b

cisco ios xe 16.12.2

cisco ios 15.8\\(3\\)m3a

cisco ios 15.6\\(3\\)m6a

cisco ios 15.2\\(7\\)e0a

cisco ios 15.2\\(7a\\)e0b

cisco ios 15.6\\(3\\)m6b

cisco ios 15.2\\(7\\)e1

cisco ios xe 16.6.7a

cisco ios 15.7\\(3\\)m4

cisco ios 15.7\\(3\\)m5

cisco ios 15.7\\(3\\)m4b

cisco ios 15.2\\(4\\)e8

cisco ios 15.8\\(3\\)m1a

cisco ios xe 3.8.9e

cisco ios 15.8\\(3\\)m3

cisco ios xe 16.9.4c

cisco ios 15.5\\(3\\)s9

cisco ios xe 3.11.1e

cisco ios 15.8\\(3\\)m2a

cisco ios 15.8\\(3\\)m2

cisco ios 15.6\\(3\\)m6

cisco ios 15.8\\(3\\)m1

cisco ios 15.2\\(6\\)e3

cisco ios 15.5\\(3\\)s9a

cisco ios xe 3.11.1ae

cisco ios 15.2\\(7\\)e1a

cisco ios 15.5\\(3\\)m9

cisco ios 15.9\\(3\\)m

cisco ios 15.2\\(7\\)e0b

cisco ios 15.1\\(3\\)svs

cisco ios xe 16.12.2a

cisco ios 15.7\\(3\\)m4a

cisco ios xe 16.6.7

cisco ios 15.6\\(3\\)m7

cisco ios 15.5\\(3\\)m10

cisco ios 15.2\\(4\\)e9

cisco ios 15.9\\(3\\)m0a

cisco ios 15.5\\(1\\)sy3

cisco ios 15.2\\(6\\)eb

cisco ios xe 16.10.3

cisco ios xe 16.12.4

cisco ios 15.7\\(3\\)m6

cisco ios 15.5\\(3\\)m11

cisco ios 15.7\\(3\\)m7

cisco ios 15.6\\(3\\)m9

cisco ios 15.8\\(3\\)m4

cisco ios 15.8\\(3\\)m5

cisco ios 15.6\\(3\\)m8

cisco ios xe 16.3.10

cisco ios 15.2\\(7b\\)e0b

cisco ios xe 16.9.5

cisco ios xe 16.9.5f

cisco ios xe 16.6.8

cisco ios 15.2\\(4\\)ea9a

cisco ios 15.2\\(4\\)ea10

cisco ios 15.1\\(3\\)svr1

cisco ios 15.2\\(4\\)e10

cisco ios xe 3.8.10e

cisco ios xe 16.12.3

cisco ios xe 17.2.1

cisco ios xe 17.1.1s

cisco ios xe 16.12.2t

cisco ios xe 17.1.1a

cisco ios xe 16.12.2s

cisco ios xe 16.12.3a

cisco ios xe 17.1.1t

cisco ios xe 16.3.11

cisco ios xe 17.2.1a

cisco ios xe 17.2.1v

cisco ios xe 16.12.1z

cisco ios xe 16.12.3s

cisco ios xe 17.2.1r

cisco ios xe 17.1.2

cisco ios xe 16.12.4a

cisco ios xe 17.2.2

cisco ios xe 17.3.1

cisco ios xe 17.3.2

cisco ios xe 17.3.1a

cisco ios xe 17.3.2a

cisco ios xe 17.3.1w

cisco ios xe 16.9.6

cisco ios 15.3\\(3\\)jpc97

cisco ios 15.5\\(1\\)sy6

cisco ios 15.2\\(7\\)e2b

cisco ios 15.2\\(7\\)e2a

cisco ios 15.5\\(3\\)s10a

cisco ios xe 3.16.10as

cisco ios xe 3.11.3ae

cisco ios 15.9\\(3\\)m2a

cisco ios 15.1\\(3\\)svr2

cisco ios 15.1\\(3\\)svr3

cisco ios 15.2\\(4\\)e10a

cisco ios 15.9\\(3\\)m1

cisco ios 15.5\\(1\\)sy5

cisco ios 15.1\\(3\\)svs1

cisco ios 15.9\\(3\\)m2

cisco ios 15.2\\(7\\)e3

cisco ios xe 3.11.2ae

cisco ios 15.2\\(7\\)e2

cisco ios xe 3.11.2e

Vendor Advisories

A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subnets This vulnerability exists because ARP entries are mismanaged An attacker could exploi ...