CVE-2021-34708Improper Verification of Cryptographic Signature in Cisco IOS XR

Severity
6.7MEDIUMNVD
CNA6.0
EPSS
0.0%
top 93.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 9
Latest updateMay 24

Description

Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for Cisco 8000 Series Routers could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

NVDcisco/ios_xr7.4.07.4.1+1

🔴Vulnerability Details

2
GHSA
GHSA-xw5r-2555-jwfv: Multiple vulnerabilities in image verification checks of Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS2022-05-24
CVEList
Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities2021-09-09

📋Vendor Advisories

1
Cisco
Cisco IOS XR Software for Cisco 8000 and Network Convergence System 540 Series Routers Image Verification Vulnerabilities2021-09-08
CVE-2021-34708 — Cisco IOS XR vulnerability | cvebase