CVEvulnerability
CVE-2021-1381
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-489
Description
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could exploit this vulnerability by running commands on the hardware platform to open a debugging console. A successful exploit could allow the attacker to access a debugging console.
Affected configurations
• cisco ios xe 16.11.1
• cisco ios xe 16.11.1a
• cisco ios xe 16.11.1b
• cisco ios xe 16.11.1c
• cisco ios xe 16.11.1s
• cisco ios xe 16.11.2
• cisco ios xe 16.12.1
• cisco ios xe 16.12.1a
• cisco ios xe 16.12.1c
• cisco ios xe 16.12.1s
• cisco ios xe 16.12.1t
• cisco ios xe 16.12.1w
• cisco ios xe 16.12.1x
• cisco ios xe 16.12.1y
• cisco ios xe 16.12.1z
• cisco ios xe 16.12.1za
• cisco ios xe 16.12.2
• cisco ios xe 16.12.2a
• cisco ios xe 16.12.2s
• cisco ios xe 16.12.2t
• cisco ios xe 16.12.3
• cisco ios xe 16.12.3a
• cisco ios xe 16.12.3s
• cisco ios xe 16.12.4
• cisco ios xe 16.12.4a
• cisco ios xe 17.1.1
• cisco ios xe 17.1.1a
• cisco ios xe 17.1.1s
• cisco ios xe 17.1.1t
• cisco ios xe 17.1.2
• cisco ios xe 17.2.1
• cisco ios xe 17.2.1a
• cisco ios xe 17.2.1r
• cisco ios xe 17.2.1v
• cisco ios xe 17.2.2
• cisco ios xe 17.2.3
Related
Weakness · CWE (1)
- CWE-489 Active Debug Code weakness