What’s Vulnerable › Vulnerabilities

CVE-2021-1136: Cisco IOS XR Software for Cisco 8000 Series Routers and Network Convergence System 540 Series Routers Image Verification Vulnerabilities

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-02-04 · updated 2026-06-17
• Weakness: CWE-347

Description

Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco IOS XR Software: before 7.0.12; from 7.1.0 before 7.2.1; before 7.2.1 — fixed in 7.0.12, 7.2.1

How to fix

Upgrade to a fixed version: Cisco IOS XR Software 7.0.12, 7.2.1. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt

Get alerted when CVE-2021-1136 or the next vulnerability affects your stack