CVE-2021-34718

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and read arbitrary files on the local device. This vulnerability is due to insufficient input validation of arguments that are supplied by the user for a specific file transfer method. An attacker with lower-level privileges could exploit this vulnerability by specifying Secure Copy Protocol (SCP) parameters when authenticating to a device. A successful exploit could allow the attacker to elevate their privileges and retrieve and upload files on a device that they should not have access to.

• CWE-88
• CWE-88

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-inject-QwZOCv2Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-inject-QwZOCv2Vendor Advisory

Published

Sep 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34711A vulnerability in the debug shell of Cisco IP Phone softwar…5.5
• CVE-2021-34712A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-34713A vulnerability in the Layer 2 punt code of Cisco IOS XR Sof…7.4
• CVE-2021-34714A vulnerability in the Unidirectional Link Detection (UDLD) …7.4
• CVE-2021-34715A vulnerability in the image verification function of Cisco …7.2
• CVE-2021-34716A vulnerability in the web-based management interface of Cis…7.2
• CVE-2021-34719Multiple vulnerabilities in the CLI of Cisco IOS XR Software…7.8
• CVE-2021-3472A flaw was found in xorg-x11-server in versions before 1.20.…7.8
• CVE-2021-34720A vulnerability in the IP Service Level Agreements (IP SLA) …8.6
• CVE-2021-34721Multiple vulnerabilities in the CLI of Cisco IOS XR Software…6.7
• CVE-2021-34722Multiple vulnerabilities in the CLI of Cisco IOS XR Software…6.7
• CVE-2021-34723A vulnerability in a specific CLI command that is run on Cis…6.7