Lucene search

CiscoCISCO-SA-20190925-IOSXE-CODEEXEC

HistorySep 25, 2019 - 4:00 p.m.

Cisco IOS XE Software Arbitrary Code Execution Vulnerability

2019-09-2516:00:00

tools.cisco.com

EPSS

0.001

Percentile

34.9%

JSON

A vulnerability in the filesystem of Cisco IOS XE Software could allow an authenticated, local attacker with physical access to an affected device to execute arbitrary code on the underlying operating system (OS) with root privileges.

The vulnerability is due to insufficient file location validation. An attacker could exploit this vulnerability by placing code in a specific format on a USB device and inserting it into an affected Cisco device. A successful exploit could allow the attacker to execute the code with root privileges on the underlying OS of the affected device.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-codeexec [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-iosxe-codeexec”]

Affected configurations

Vulners

Node

ciscocisco_ios_xe_softwareMatch3.11s

ciscocisco_ios_xe_softwareMatch3.12s

ciscocisco_ios_xe_softwareMatch3.13s

ciscocisco_ios_xe_softwareMatch3.14s

ciscocisco_ios_xe_softwareMatch3.15s

ciscocisco_ios_xe_softwareMatch3.16s

ciscocisco_ios_xe_softwareMatch3.17s

ciscocisco_ios_xe_softwareMatch16.1

ciscocisco_ios_xe_softwareMatch16.2

ciscocisco_ios_xe_softwareMatch16.3

ciscocisco_ios_xe_softwareMatch16.4

ciscocisco_ios_xe_softwareMatch16.5

ciscocisco_ios_xe_softwareMatch3.18s

ciscocisco_ios_xe_softwareMatch3.18sp

ciscocisco_ios_xe_softwareMatch16.6

ciscocisco_ios_xe_softwareMatch16.7

ciscocisco_ios_xe_softwareMatch16.8

ciscocisco_ios_xe_softwareMatch16.9

ciscocisco_ios_xe_softwareMatch3.11.1s

ciscocisco_ios_xe_softwareMatch3.11.2s

ciscocisco_ios_xe_softwareMatch3.11.0s

ciscocisco_ios_xe_softwareMatch3.11.3s

ciscocisco_ios_xe_softwareMatch3.11.4s

ciscocisco_ios_xe_softwareMatch3.12.0s

ciscocisco_ios_xe_softwareMatch3.12.1s

ciscocisco_ios_xe_softwareMatch3.12.2s

ciscocisco_ios_xe_softwareMatch3.12.3s

ciscocisco_ios_xe_softwareMatch3.12.0as

ciscocisco_ios_xe_softwareMatch3.12.4s

ciscocisco_ios_xe_softwareMatch3.13.0s

ciscocisco_ios_xe_softwareMatch3.13.1s

ciscocisco_ios_xe_softwareMatch3.13.2s

ciscocisco_ios_xe_softwareMatch3.13.3s

ciscocisco_ios_xe_softwareMatch3.13.4s

ciscocisco_ios_xe_softwareMatch3.13.5s

ciscocisco_ios_xe_softwareMatch3.13.2as

ciscocisco_ios_xe_softwareMatch3.13.0as

ciscocisco_ios_xe_softwareMatch3.13.5as

ciscocisco_ios_xe_softwareMatch3.13.6s

ciscocisco_ios_xe_softwareMatch3.13.7s

ciscocisco_ios_xe_softwareMatch3.13.6as

ciscocisco_ios_xe_softwareMatch3.13.6bs

ciscocisco_ios_xe_softwareMatch3.13.7as

ciscocisco_ios_xe_softwareMatch3.13.8s

ciscocisco_ios_xe_softwareMatch3.13.9s

ciscocisco_ios_xe_softwareMatch3.13.10s

ciscocisco_ios_xe_softwareMatch3.14.0s

ciscocisco_ios_xe_softwareMatch3.14.1s

ciscocisco_ios_xe_softwareMatch3.14.2s

ciscocisco_ios_xe_softwareMatch3.14.3s

ciscocisco_ios_xe_softwareMatch3.14.4s

ciscocisco_ios_xe_softwareMatch3.15.0s

ciscocisco_ios_xe_softwareMatch3.15.1s

ciscocisco_ios_xe_softwareMatch3.15.2s

ciscocisco_ios_xe_softwareMatch3.15.1cs

ciscocisco_ios_xe_softwareMatch3.15.3s

ciscocisco_ios_xe_softwareMatch3.15.4s

ciscocisco_ios_xe_softwareMatch3.16.0s

ciscocisco_ios_xe_softwareMatch3.16.1s

ciscocisco_ios_xe_softwareMatch3.16.0as

ciscocisco_ios_xe_softwareMatch3.16.1as

ciscocisco_ios_xe_softwareMatch3.16.2s

ciscocisco_ios_xe_softwareMatch3.16.2as

ciscocisco_ios_xe_softwareMatch3.16.0bs

ciscocisco_ios_xe_softwareMatch3.16.0cs

ciscocisco_ios_xe_softwareMatch3.16.3s

ciscocisco_ios_xe_softwareMatch3.16.2bs

ciscocisco_ios_xe_softwareMatch3.16.3as

ciscocisco_ios_xe_softwareMatch3.16.4s

ciscocisco_ios_xe_softwareMatch3.16.4as

ciscocisco_ios_xe_softwareMatch3.16.4bs

ciscocisco_ios_xe_softwareMatch3.16.4gs

ciscocisco_ios_xe_softwareMatch3.16.5s

ciscocisco_ios_xe_softwareMatch3.16.4cs

ciscocisco_ios_xe_softwareMatch3.16.4ds

ciscocisco_ios_xe_softwareMatch3.16.4es

ciscocisco_ios_xe_softwareMatch3.16.6s

ciscocisco_ios_xe_softwareMatch3.16.5as

ciscocisco_ios_xe_softwareMatch3.16.5bs

ciscocisco_ios_xe_softwareMatch3.16.7s

ciscocisco_ios_xe_softwareMatch3.16.6bs

ciscocisco_ios_xe_softwareMatch3.16.7as

ciscocisco_ios_xe_softwareMatch3.16.7bs

ciscocisco_ios_xe_softwareMatch3.16.8s

ciscocisco_ios_xe_softwareMatch3.16.9s

ciscocisco_ios_xe_softwareMatch3.16.10s

ciscocisco_ios_xe_softwareMatch3.16.10as

ciscocisco_ios_xe_softwareMatch3.16.10bs

ciscocisco_ios_xe_softwareMatch3.17.0s

ciscocisco_ios_xe_softwareMatch3.17.1s

ciscocisco_ios_xe_softwareMatch3.17.2s

ciscocisco_ios_xe_softwareMatch3.17.1as

ciscocisco_ios_xe_softwareMatch3.17.3s

ciscocisco_ios_xe_softwareMatch3.17.4s

ciscocisco_ios_xe_softwareMatch16.1.1

ciscocisco_ios_xe_softwareMatch16.1.2

ciscocisco_ios_xe_softwareMatch16.1.3

ciscocisco_ios_xe_softwareMatch16.2.1

ciscocisco_ios_xe_softwareMatch16.2.2

ciscocisco_ios_xe_softwareMatch16.3.1

ciscocisco_ios_xe_softwareMatch16.3.2

ciscocisco_ios_xe_softwareMatch16.3.3

ciscocisco_ios_xe_softwareMatch16.3.1a

ciscocisco_ios_xe_softwareMatch16.3.4

ciscocisco_ios_xe_softwareMatch16.3.5

ciscocisco_ios_xe_softwareMatch16.3.5b

ciscocisco_ios_xe_softwareMatch16.3.6

ciscocisco_ios_xe_softwareMatch16.3.7

ciscocisco_ios_xe_softwareMatch16.3.8

ciscocisco_ios_xe_softwareMatch16.3.9

ciscocisco_ios_xe_softwareMatch16.3.10

ciscocisco_ios_xe_softwareMatch16.3.11

ciscocisco_ios_xe_softwareMatch16.4.1

ciscocisco_ios_xe_softwareMatch16.4.2

ciscocisco_ios_xe_softwareMatch16.4.3

ciscocisco_ios_xe_softwareMatch16.5.1

ciscocisco_ios_xe_softwareMatch16.5.1a

ciscocisco_ios_xe_softwareMatch16.5.1b

ciscocisco_ios_xe_softwareMatch16.5.2

ciscocisco_ios_xe_softwareMatch16.5.3

ciscocisco_ios_xe_softwareMatch3.18.0as

ciscocisco_ios_xe_softwareMatch3.18.0s

ciscocisco_ios_xe_softwareMatch3.18.1s

ciscocisco_ios_xe_softwareMatch3.18.2s

ciscocisco_ios_xe_softwareMatch3.18.3s

ciscocisco_ios_xe_softwareMatch3.18.4s

ciscocisco_ios_xe_softwareMatch3.18.0sp

ciscocisco_ios_xe_softwareMatch3.18.1sp

ciscocisco_ios_xe_softwareMatch3.18.1asp

ciscocisco_ios_xe_softwareMatch3.18.1gsp

ciscocisco_ios_xe_softwareMatch3.18.1bsp

ciscocisco_ios_xe_softwareMatch3.18.1csp

ciscocisco_ios_xe_softwareMatch3.18.2sp

ciscocisco_ios_xe_softwareMatch3.18.1hsp

ciscocisco_ios_xe_softwareMatch3.18.2asp

ciscocisco_ios_xe_softwareMatch3.18.1isp

ciscocisco_ios_xe_softwareMatch3.18.3sp

ciscocisco_ios_xe_softwareMatch3.18.4sp

ciscocisco_ios_xe_softwareMatch3.18.3asp

ciscocisco_ios_xe_softwareMatch3.18.3bsp

ciscocisco_ios_xe_softwareMatch3.18.5sp

ciscocisco_ios_xe_softwareMatch3.18.6sp

ciscocisco_ios_xe_softwareMatch3.18.7sp

ciscocisco_ios_xe_softwareMatch3.18.8asp

ciscocisco_ios_xe_softwareMatch3.18.9sp

ciscocisco_ios_xe_softwareMatch16.6.1

ciscocisco_ios_xe_softwareMatch16.6.2

ciscocisco_ios_xe_softwareMatch16.6.3

ciscocisco_ios_xe_softwareMatch16.6.4

ciscocisco_ios_xe_softwareMatch16.6.5

ciscocisco_ios_xe_softwareMatch16.6.4s

ciscocisco_ios_xe_softwareMatch16.6.4a

ciscocisco_ios_xe_softwareMatch16.6.5a

ciscocisco_ios_xe_softwareMatch16.6.6

ciscocisco_ios_xe_softwareMatch16.6.5b

ciscocisco_ios_xe_softwareMatch16.6.7

ciscocisco_ios_xe_softwareMatch16.6.7a

ciscocisco_ios_xe_softwareMatch16.6.8

ciscocisco_ios_xe_softwareMatch16.6.9

ciscocisco_ios_xe_softwareMatch16.6.10

ciscocisco_ios_xe_softwareMatch16.7.1

ciscocisco_ios_xe_softwareMatch16.7.1a

ciscocisco_ios_xe_softwareMatch16.7.1b

ciscocisco_ios_xe_softwareMatch16.7.2

ciscocisco_ios_xe_softwareMatch16.7.3

ciscocisco_ios_xe_softwareMatch16.8.1

ciscocisco_ios_xe_softwareMatch16.8.1a

ciscocisco_ios_xe_softwareMatch16.8.1b

ciscocisco_ios_xe_softwareMatch16.8.1s

ciscocisco_ios_xe_softwareMatch16.8.1c

ciscocisco_ios_xe_softwareMatch16.8.1d

ciscocisco_ios_xe_softwareMatch16.8.2

ciscocisco_ios_xe_softwareMatch16.8.1e

ciscocisco_ios_xe_softwareMatch16.8.3

ciscocisco_ios_xe_softwareMatch16.9.1

ciscocisco_ios_xe_softwareMatch16.9.2

ciscocisco_ios_xe_softwareMatch16.9.1a

ciscocisco_ios_xe_softwareMatch16.9.1b

ciscocisco_ios_xe_softwareMatch16.9.1s

ciscocisco_ios_xe_softwareMatch16.9.1c

ciscocisco_ios_xe_softwareMatch16.9.1d

ciscocisco_ios_xe_softwareMatch16.9.3

ciscocisco_ios_xe_softwareMatch16.9.2a

ciscocisco_ios_xe_softwareMatch16.9.2s

ciscocisco_ios_xe_softwareMatch16.9.3h

ciscocisco_ios_xe_softwareMatch16.9.3s

ciscocisco_ios_xe_softwareMatch16.9.3a

VendorProductVersionCPE
ciscocisco_ios_xe_software3.11scpe:2.3:a:cisco:cisco_ios_xe_software:3.11s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.12scpe:2.3:a:cisco:cisco_ios_xe_software:3.12s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.13scpe:2.3:a:cisco:cisco_ios_xe_software:3.13s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.14scpe:2.3:a:cisco:cisco_ios_xe_software:3.14s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.15scpe:2.3:a:cisco:cisco_ios_xe_software:3.15s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.16scpe:2.3:a:cisco:cisco_ios_xe_software:3.16s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software3.17scpe:2.3:a:cisco:cisco_ios_xe_software:3.17s:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.1cpe:2.3:a:cisco:cisco_ios_xe_software:16.1:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.2cpe:2.3:a:cisco:cisco_ios_xe_software:16.2:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.3cpe:2.3:a:cisco:cisco_ios_xe_software:16.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	cisco_ios_xe_software	3.11s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.11s:::::::*
cisco	cisco_ios_xe_software	3.12s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.12s:::::::*
cisco	cisco_ios_xe_software	3.13s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.13s:::::::*
cisco	cisco_ios_xe_software	3.14s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.14s:::::::*
cisco	cisco_ios_xe_software	3.15s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.15s:::::::*
cisco	cisco_ios_xe_software	3.16s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.16s:::::::*
cisco	cisco_ios_xe_software	3.17s	cpe:2.3:a:cisco:cisco_ios_xe_software:3.17s:::::::*
cisco	cisco_ios_xe_software	16.1	cpe:2.3:a:cisco:cisco_ios_xe_software:16.1:::::::*
cisco	cisco_ios_xe_software	16.2	cpe:2.3:a:cisco:cisco_ios_xe_software:16.2:::::::*
cisco	cisco_ios_xe_software	16.3	cpe:2.3:a:cisco:cisco_ios_xe_software:16.3:::::::*