CVE-2021-1136
Published Feb 4, 2021
Last updated a year ago
Overview
- Description
- Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
- Source
- ykramarz@cisco.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.7
- Impact score
- 5.9
- Exploitability score
- 0.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- ykramarz@cisco.com
- CWE-347
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CED0163-5695-4267-8677-1E2C42D73FED",
"versionEndExcluding": "7.0.12"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDFFC1A3-D76E-4CF9-97F8-D45493CFF949",
"versionEndExcluding": "7.2.1",
"versionStartIncluding": "7.1.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
},
{
"criteria": "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
},
{
"criteria": "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
},
{
"criteria": "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
},
{
"criteria": "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9ED06361-5A68-4656-AEA5-240C290594CD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EEE27AF-9402-4DFA-B1CF-E51972485918",
"versionEndExcluding": "7.2.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]