CVE-2021-34728

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-347296.7A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to executeCVE-2021-34734.9An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be CVE-2021-347309.8A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow CVE-2021-347314.8A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perfoCVE-2021-347326.1A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacCVE-2021-347335.5A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, CVE-2021-347346.5A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware CVE-2021-347357.5Multiple vulnerabilities in the Cisco ATA 190 Series Analog Telephone Adapter Software could allow an attacker to perform a command injectioCVE-2021-347367.5A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticateCVE-2021-347377.5A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trCVE-2021-347386.1Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an attacker to cCVE-2021-347398.1A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remot
CVE-2021-34728: High severity, CVSS 7.8 | Vulnix