CVE-2021-34718

CVE-2021-34718 is a high-severity vulnerability in the SSH Server process of Cisco IOS XR Software, allowing an authenticated, remote attacker to read and write arbitrary files. This flaw stems from insufficient input validation of SCP parameters, enabling an attacker with lower-level privileges to elevate their access and manipulate files. The vulnerability has a CVSS score of 8.1 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality and integrity. While no public exploit code or active exploitation has been reported, it has garnered some community discussion and media coverage.