6.7

CVE-2021-1244

Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities

Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version < 7.0.12
   Cisco ≫ 8201 Version -
   Cisco ≫ 8202 Version -
   Cisco ≫ 8808 Version -
   Cisco ≫ 8812 Version -
   Cisco ≫ 8818 Version -
Cisco ≫ Ios Xr Version >= 7.1.0 < 7.2.1
   Cisco ≫ 8201 Version -
   Cisco ≫ 8202 Version -
   Cisco ≫ 8808 Version -
   Cisco ≫ 8812 Version -
   Cisco ≫ 8818 Version -
Cisco ≫ Ios Xr Version < 7.2.1
   Cisco ≫ Ncs 540 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.103
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Cisco PSIRT 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt
Vendor Advisory