CVE-2021-1227 Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability
An attacker can trick a user into performing unauthorized actions on Cisco NX-OS devices via NX-API, allowing configuration viewing and modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-1227?
CVE-2021-1227 is a high-severity vulnerability in Cisco Nx-Os, published on 24 Feb 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default.
Weakness: CWE-352
Which versions are affected by CVE-2021-1227?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2021-1227?
No fix has been published for CVE-2021-1227 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-1227 being exploited?
There is no known exploitation of CVE-2021-1227 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
Sources
Also known as GHSA-236c-rp7g-fqf2.