Vulnerability in Cisco 1100-4g Integrated Services Router
CVE-2021-34723
A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific CLI command parameters. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of the configuration database and gain root-level access to an affected device.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (15.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 16th percentile — 15.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Cisco 1100-4g Integrated Services Router
- Cisco 1100-4gltegb Integrated Services Router
- Cisco 1100-4gltena Integrated Services Router
- Cisco 1100-6g Integrated Services Router
- Cisco 1100 Integrated Services Router
- Cisco 1100-Lte Integrated Services Router
- Cisco 4321 Integrated Services Router
- Cisco 4331 Integrated Services Router
- Cisco 4351 Integrated Services Router
- Cisco 4431 Integrated Services Router
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdw… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-34723?
- CVE-2021-34723 is a medium-severity vulnerability in Cisco 1100-4g Integrated Services Router, classified under Exposure of Resource to Wrong Sphere. CVSS score: 6.7/10. Published 2021-09-23.
- How severe is CVE-2021-34723?
- Medium severity. CVSS v3 base score is 6.7 out of 10.