CVE-2021-34722CWE-78

Cisco IOS XR Software Command Injection Vulnerabilities

Medium · published September 9, 2021

CVSS v3.1
6.7
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2021-09-09T05:01Z
EPSS history
Timeline
  • 09 SEP 05:01Z
    Cisco IOS XR Software Command Injection Vulnerabilities
    cvelistv5