csirt@kutim:~/threat-intel/cve/CVE-2021-34705

Katalog CVE

CVSS 5.3 · Medium EPSS 1,0%

Kerentanan Improper Handling of Undefined Values pada cisco ios. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in the Voice Telephony Service Provider (VTSP) service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial strings at Foreign Exchange Office (FXO) interfaces. An attacker could exploit this vulnerability by sending a malformed dial string to an affected device via either the ISDN protocol or SIP. A successful exploit could allow the attacker to conduct toll fraud, resulting in unexpected financial impact to affected customers.

Rincian

Terbit di NVD
23 September 2021
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-232: Improper Handling of Undefined Values
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 62,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 12.3(7)xm
cisco ios Versi 12.3(7)xr
cisco ios Versi 12.3(7)xr1
cisco ios Versi 12.3(7)xr2
cisco ios Versi 12.3(7)xr3
cisco ios Versi 12.3(7)xr4
cisco ios Versi 12.3(7)xr5
cisco ios Versi 12.3(7)xr6
cisco ios Versi 12.3(7)xr7
cisco ios Versi 12.3(8)ja2
cisco ios Versi 12.3(8)jea1
cisco ios Versi 12.3(8)jea2
cisco ios Versi 12.3(8)jea3
cisco ios Versi 12.3(8)jeb
cisco ios Versi 12.3(8)jeb1
cisco ios Versi 12.3(8)jec3
cisco ios Versi 12.3(8)jed1
cisco ios Versi 12.3(8)jee
cisco ios Versi 12.3(8)jk
cisco ios Versi 12.3(8)jk1
cisco ios Versi 12.3(8)t
cisco ios Versi 12.3(8)t0a
cisco ios Versi 12.3(8)t1
cisco ios Versi 12.3(8)t2
cisco ios Versi 12.3(8)t3
cisco ios Versi 12.3(8)t4
cisco ios Versi 12.3(8)t5
cisco ios Versi 12.3(8)t6
cisco ios Versi 12.3(8)t7
cisco ios Versi 12.3(8)t8
cisco ios Versi 12.3(8)t9
cisco ios Versi 12.3(8)t10
cisco ios Versi 12.3(8)t11
cisco ios Versi 12.3(8)xu
cisco ios Versi 12.3(8)xu1
cisco ios Versi 12.3(8)xu2
cisco ios Versi 12.3(8)xu3
cisco ios Versi 12.3(8)xu4
cisco ios Versi 12.3(8)xu5
cisco ios Versi 12.3(8)xw
cisco ios Versi 12.3(8)xw1
cisco ios Versi 12.3(8)xw1a
cisco ios Versi 12.3(8)xw1b
cisco ios Versi 12.3(8)xw2
cisco ios Versi 12.3(8)xw3
cisco ios Versi 12.3(8)xx
cisco ios Versi 12.3(8)xx1
cisco ios Versi 12.3(8)xx2
cisco ios Versi 12.3(8)xx2a
cisco ios Versi 12.3(8)xx2b
cisco ios Versi 12.3(8)xx2c
cisco ios Versi 12.3(8)xx2d
cisco ios Versi 12.3(8)xx2e
cisco ios Versi 12.3(8)xy
cisco ios Versi 12.3(8)xy1
cisco ios Versi 12.3(8)xy2
cisco ios Versi 12.3(8)xy3
cisco ios Versi 12.3(8)xy4
cisco ios Versi 12.3(8)xy5
cisco ios Versi 12.3(8)xy6

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 1721 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.