csirt@kutim:~/threat-intel/cve/CVE-2021-1391

Katalog CVE

CVSS 6.7 · Medium EPSS 0,32%

Kerentanan Active Debug Code pada cisco ios, cisco ios xe. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassing the consent token mechanism with the residual scripts on the affected device. A successful exploit could allow the attacker to escalate from privilege level 15 to root privilege.

Rincian

Terbit di NVD
24 Maret 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-489: Active Debug Code
EPSS (30 hari)
0,32% peluang dieksploitasi; lebih tinggi dari 22,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 12.2(6)i1
cisco ios Versi 15.0(2)se13a
cisco ios Versi 15.1(3)svr1
cisco ios Versi 15.1(3)svr2
cisco ios Versi 15.1(3)svr3
cisco ios Versi 15.1(3)svs
cisco ios Versi 15.1(3)svs1
cisco ios Versi 15.2(4)ea10
cisco ios Versi 15.2(5)e
cisco ios Versi 15.2(5)e1
cisco ios Versi 15.2(5)e2
cisco ios Versi 15.2(5)e2b
cisco ios Versi 15.2(5)e2c
cisco ios Versi 15.2(5)ea
cisco ios Versi 15.2(5)ex
cisco ios Versi 15.2(5a)e
cisco ios Versi 15.2(5a)e1
cisco ios Versi 15.2(5b)e
cisco ios Versi 15.2(5c)e
cisco ios Versi 15.2(6)e
cisco ios Versi 15.2(6)e0a
cisco ios Versi 15.2(6)e0c
cisco ios Versi 15.2(6)e1
cisco ios Versi 15.2(6)e1a
cisco ios Versi 15.2(6)e1s
cisco ios Versi 15.2(6)e2
cisco ios Versi 15.2(6)e2a
cisco ios Versi 15.2(6)e2b
cisco ios Versi 15.2(6)e3
cisco ios Versi 15.2(6)eb
cisco ios Versi 15.2(7)e
cisco ios Versi 15.2(7)e0a
cisco ios Versi 15.2(7)e0b
cisco ios Versi 15.2(7)e0s
cisco ios Versi 15.2(7)e1
cisco ios Versi 15.2(7)e1a
cisco ios Versi 15.2(7)e2
cisco ios Versi 15.2(7)e2a
cisco ios Versi 15.2(7)e2b
cisco ios Versi 15.2(7)e3
cisco ios Versi 15.2(7)e3k
cisco ios Versi 15.2(7a)e0b
cisco ios Versi 15.2(7b)e0b
cisco ios Versi 15.3(3)jf13
cisco ios xe Versi 3.9.0e
cisco ios xe Versi 3.9.1e
cisco ios xe Versi 3.9.2be
cisco ios xe Versi 3.9.2e
cisco ios xe Versi 3.10.0ce
cisco ios xe Versi 3.10.0e
cisco ios xe Versi 3.10.1ae
cisco ios xe Versi 3.10.1e
cisco ios xe Versi 3.10.1se
cisco ios xe Versi 3.10.2e
cisco ios xe Versi 3.10.3e
cisco ios xe Versi 3.11.0e
cisco ios xe Versi 3.11.1ae
cisco ios xe Versi 3.11.1e
cisco ios xe Versi 3.11.2ae
cisco ios xe Versi 3.11.2e

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 134 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.