PT-2021-4046 · Cisco · Cisco Network Convergence System (Ncs) 540 Series Routers+3
Published
2021-09-08
·
Updated
2021-09-21
·
CVE-2021-34708
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco IOS XR Software for Cisco 8000 Series Routers (affected versions not specified)
Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images (affected versions not specified)
Description
The issue is related to errors in cryptographic signature verification checks. It could allow a remote attacker to execute arbitrary code on the target system. An authenticated, local attacker may also execute arbitrary code on the underlying operating system.
Recommendations
For Cisco IOS XR Software for Cisco 8000 Series Routers, update to a version that includes the fix for the image verification checks vulnerabilities.
For Cisco Network Convergence System (NCS) 540 Series Routers running Cisco IOS XR NCS540L software images, update to a version that includes the fix for the image verification checks vulnerabilities.
As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco 8000 Series Routers
Cisco Ios Xr Ncs540L
Cisco Ios Xr
Cisco Network Convergence System (Ncs) 540 Series Routers