CVE-2021-34705

CVE-2021-34705 concerns Cisco IOS/IOS XE VTSP where dial-string validation at FXO interfaces is insufficient. An unauthenticated remote attacker could bypass destination patterns and dial arbitrary numbers via ISDN or SIP, enabling toll fraud. Connected sources (Cisco advisories, Nessus plugin, C...

Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...