CVE-2021-1128: cisco ios xr

csirt@kutim:~/threat-intel/cve/CVE-2021-1128

CVSS 5.5 · Medium EPSS 0,34%

Kerentanan Insertion of Sensitive Information Into Sent Data pada cisco ios xr. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit this vulnerability by using a specific command at the command line. A successful exploit could allow the attacker to obtain sensitive information within the configuration that otherwise might not have been accessible beyond the privileges of the invoking user.

Rincian

Terbit di NVD: 4 Februari 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-201: Insertion of Sensitive Information Into Sent Data
EPSS (30 hari): 0,34% peluang dieksploitasi; lebih tinggi dari 25,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	ios xr	Semua versi sebelum 7.1.2
cisco	ios xr	Versi 7.2.0
cisco	ios xr	Versi 7.3.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-infodisc-4mtm9Gyt advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.