CVE-2021-1227

Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability

HIGH

8.1

CVSS Score

Published: February 24, 2021 at 07:30 PM UTC

Updated: June 17, 2026 at 03:31 AM UTC

46 products affected across 1 vendorNx OSNexus 3048Nexus 7000

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploit prediction

EPSS 0.7%

SSVC

No known exploit

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

7.3(8)n1(0.809)8.4(2a)8.4(3)8.4(3)s19 9.3(3)idi9(0.569)

cisco-mds-9148s (environment) · cisco-mds-9250i (environment) · cisco-mds-9706 (environment) · cisco-mds-9710 (environment) · cisco-nexus-3048 (environment) · cisco-nexus-31108pv-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-x (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172pq (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-5548p (environment) · cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5672up-16g (environment) · cisco-nexus-5696q (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-7000 (environment) · cisco-nexus-7700 (environment) · cisco-nexus-9200 (environment) · cisco-nexus-9300 (environment) · cisco-nexus-9500 (environment)

Mds 9148S · Ciscodevice

80%

All versions

Mds 9250I · Ciscodevice

80%

All versions

Mds 9706 · Ciscodevice

80%

All versions

Mds 9710 · Ciscodevice

80%

All versions