CVE-2021-1381: Cisco IOS XE

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could exploit this vulnerability by running commands on the hardware platform to open a debugging console. A successful exploit could allow the attacker to access a debugging console.

Affected products

• Cisco IOS XE: version 16.11.1 only; version 16.11.1a only; version 16.11.1b only; version 16.11.1c only; version 16.11.1s only; version 16.11.2 only; …

Published 2021-03-24. Last modified 2026-06-17.