A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute arbitrary code or cause a reload on an affected device. The vulnerability is due to improper validation of string input from certain fields in Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected device. A successful exploit could allow the attacker to cause a stack overflow, which could allow the attacker to execute arbitrary code with administrative privileges on an affected device. Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCisco Asr 9000
HWCiscowszystkie wersjeCisco Asr 9000v
HWCiscowszystkie wersjeCisco Asr 9001
HWCiscowszystkie wersjeCisco Asr 9006
HWCiscowszystkie wersjeCisco Asr 9010
HWCiscowszystkie wersjeCisco Asr 9901
HWCiscowszystkie wersjeCisco Asr 9903
HWCiscowszystkie wersjeCisco Asr 9904
HWCiscowszystkie wersjeCisco Asr 9906
HWCiscowszystkie wersjeCisco Asr 9910
HWCiscowszystkie wersjeCisco Asr 9912
HWCiscowszystkie wersjeCisco Asr 9920
HWCiscowszystkie wersjeCisco Asr 9922
HWCiscowszystkie wersjeCisco Crs X
HWCiscowszystkie wersjeCisco IOS XR
OSCisco5.2.56.4.26.5.36.6.257.0.17.0.0 – 7.0.2 (bez)6.6.0 – 6.6.12 (bez)Cisco Ncs 540 12z20g Sys A
HWCiscowszystkie wersjeCisco Ncs 540 12z20g Sys D
HWCiscowszystkie wersjeCisco Ncs 540 24z8q2c Sys
HWCiscowszystkie wersjeCisco Ncs 540 28z4c Sys A
HWCiscowszystkie wersjeCisco Ncs 540 28z4c Sys D
HWCiscowszystkie wersjeCisco Ncs 540 Acc Sys
HWCiscowszystkie wersjeCisco Ncs 540l
HWCiscowszystkie wersjeCisco Ncs 540x 12z16g Sys A
HWCiscowszystkie wersjeCisco Ncs 540x 12z16g Sys D
HWCiscowszystkie wersjeCisco Ncs 540x 16z4g8q2c A
HWCiscowszystkie wersjeCisco Ncs 540x 16z4g8q2c D
HWCiscowszystkie wersjeCisco Ncs 540x Acc Sys
HWCiscowszystkie wersjeCisco Ncs 5501
HWCiscowszystkie wersjeCisco Ncs 5501 Se
HWCiscowszystkie wersjeCisco Ncs 5502
HWCiscowszystkie wersje
CISA KEV — detailsi
- Vendori
- Cisco ↗
- Producti
- IOS XR
- Added to KEVi
- November 3, 2021
- Remediation deadline (US Federal)i
- May 3, 2022(overdue)
Apply updates per vendor instructions.
Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.
Related vulnerabilities
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability tha...
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Softwa...
A vulnerability in the sysadmin virtual machine (VM) on Cisco ASR 9000 Series Aggregation Services Routers run...
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Sof...