CVEvulnerability

CVE-2021-1381

6.1 MEDIUM Published 2021-03-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-03-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-489

Description

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could exploit this vulnerability by running commands on the hardware platform to open a debugging console. A successful exploit could allow the attacker to access a debugging console.

Affected configurations

• cisco ios xe 16.11.1 • cisco ios xe 16.11.1a • cisco ios xe 16.11.1b • cisco ios xe 16.11.1c • cisco ios xe 16.11.1s • cisco ios xe 16.11.2 • cisco ios xe 16.12.1 • cisco ios xe 16.12.1a • cisco ios xe 16.12.1c • cisco ios xe 16.12.1s • cisco ios xe 16.12.1t • cisco ios xe 16.12.1w • cisco ios xe 16.12.1x • cisco ios xe 16.12.1y • cisco ios xe 16.12.1z • cisco ios xe 16.12.1za • cisco ios xe 16.12.2 • cisco ios xe 16.12.2a • cisco ios xe 16.12.2s • cisco ios xe 16.12.2t • cisco ios xe 16.12.3 • cisco ios xe 16.12.3a • cisco ios xe 16.12.3s • cisco ios xe 16.12.4 • cisco ios xe 16.12.4a • cisco ios xe 17.1.1 • cisco ios xe 17.1.1a • cisco ios xe 17.1.1s • cisco ios xe 17.1.1t • cisco ios xe 17.1.2 • cisco ios xe 17.2.1 • cisco ios xe 17.2.1a • cisco ios xe 17.2.1r • cisco ios xe 17.2.1v • cisco ios xe 17.2.2 • cisco ios xe 17.2.3

Related

Weakness · CWE (1)

  • CWE-489 Active Debug Code weakness

References