CVE-2021-34728: Cisco IOS XR

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco IOS XR: before 7.3.2 (fixed in 7.3.2); from 7.4.0, before 7.4.1 (fixed in 7.4.1)

Published 2021-09-09. Last modified 2026-06-17.