GCVE - cpe:2.3:h:cisco:ncs_540_fronthaul:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:ncs_540_fronthaul:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Ncs 540 Fronthaul (`34c8e81b-31b6-553b-9b64-f18351fdf4c2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20064`	not_vulnerable	2026-06-08 05:52:38.604706	Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability MEDIUM (4.6) A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is due to the inclusion of unnecessary commands within the GRUB environment that allow sensitive files to be viewed. An attacker could exploit this vulnerability by being connected to the console port of the Cisco IOS XR device when the device is power-cycled. A successful exploit could allow the attacker to view sensitive files that could be used to conduct additional attacks against the device. Published: 2023-03-09T00:00:00.000Z Updated: 2024-10-25T16:03:12.091Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-load-infodisc-9rdOr5Fq	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34728`	not_vulnerable	2026-06-08 05:32:16.282054	Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities HIGH (7.8) Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-09-09T05:01:25.148Z Updated: 2024-11-07T22:00:30.308Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privescal-dZYMrKf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34722`	not_vulnerable	2026-06-08 05:32:16.225677	Cisco IOS XR Software Command Injection Vulnerabilities MEDIUM (6.7) Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-09-09T05:01:20.026Z Updated: 2024-11-07T22:00:36.407Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-cmd-inj-wbZKvPxc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34721`	not_vulnerable	2026-06-08 05:32:16.223576	Cisco IOS XR Software Command Injection Vulnerabilities MEDIUM (6.7) Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to gain access to the underlying root shell of an affected device and execute arbitrary commands with root privileges. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2021-09-09T05:01:13.579Z Updated: 2024-11-07T22:00:42.833Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-cmd-inj-wbZKvPxc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34720`	not_vulnerable	2026-06-08 05:32:16.221494	Cisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability HIGH (8.6) A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process to crash, resulting in a denial of service (DoS) condition. This vulnerability exists because socket creation failures are mishandled during the IP SLA and TWAMP processes. An attacker could exploit this vulnerability by sending specific IP SLA or TWAMP packets to an affected device. A successful exploit could allow the attacker to exhaust the packet memory, which will impact other processes, such as routing protocols, or crash the IP SLA process. Published: 2021-09-09T05:01:03.855Z Updated: 2024-11-07T22:00:49.116Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipsla-ZA3SRrpP	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34719`	not_vulnerable	2026-06-08 05:32:16.212229	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34718`	not_vulnerable	2026-06-08 05:32:16.199877	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.