CVE-2021-1227: Cisco NX-OS Software NX-API Cross-Site Request Forgery Vulnerability

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-02-24 · updated 2026-06-17
Weakness: CWE-352

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default.

Affected products

Cisco NX-OS: 8.4(2a), 8.4(3), 8.4(3)s19, 9.3(3)idi9(0.569), 7.3(8)n1(0.809)

References

Get alerted when CVE-2021-1227 or the next vulnerability affects your stack