Is CVE-2021-1384 being actively exploited?

CVE-2021-1384 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2021-1384?

CVE-2021-1384 has a CVSS 3.1 base score of 6.5 (MEDIUM).

CVE-2021-1384

MEDIUM · CVSS 6.5EPSS 35.4%EU EUVD

A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages loaded onto IOx. An attacker could exploit this vulnerability by creating a crafted application .tar file and loading it onto the device. A successful exploit could allow the attacker to perform command injection into the underlying operating system as the root user.

Key facts

CVSS score: 6.5 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weakness (CWE): CWE-77
EPSS score: 35.4% (98th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2021-6851)
Published: March 24, 2021
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2021-6851 in the EU Vulnerability Database. Last updated in EUVD on November 8, 2024.

View on the EU Vulnerability Database

Affected products

cisco / ios xe
cisco / ios xe

Certified products that may be affected

11 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Catalyst 4500 Series Wired Access Switches running IOS-XE 3.10 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-10906-2018 - archived
Cisco Catalyst 9400 Series Switches running IOS-XE 16.6 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10863-2018 - archived
Cisco Catalyst 3K/4K Wired Access Switches running IOS-XE 3.8.0E - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10688-2016 - archived
Cisco Aggregation Services Router (ASR) 1000 Series, IOS XE 3.13 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10609-2015 - archived
Cisco Integrated Services Router 4400 Series (ISR-4400), IOS XE 3.13.0 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10600-2015 - archived

See all 11 in the Security Certifications Explorer.

References

https://github.com/orangecertcc/security-research/security/advisories/GHSA-h332-fj6p-2232(Exploit, Third Party Advisory)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-cmdinj-RkSURGHG(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain