PT-2021-2496

CVE-2021-1460

·

Published

2021-03-24

·

Updated

2021-03-31

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Cisco IOx Application Framework (affected versions not specified)
Description: The issue is related to insufficient error handling during packet processing, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. An attacker could exploit this by sending a high and sustained rate of crafted TCP traffic to the IOx web server. A successful exploit could allow the attacker to cause the IOx web server to stop processing requests, resulting in a DoS condition.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾