Lucene search

CiscoCISCO-SA-XESDWPINJ-V4WEEQZU

HistoryMar 24, 2021 - 4:00 p.m.

Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities

2021-03-2416:00:00

tools.cisco.com

cisco

cli

vulnerability

operating system

software updates

EPSS

Percentile

5.1%

JSON

Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges.

These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU”]

Affected configurations

Vulners

Node

ciscocisco_ios_xe_softwareMatch16.9

ciscocisco_ios_xe_softwareMatch16.10

ciscocisco_ios_xe_softwareMatch16.11

ciscocisco_ios_xe_softwareMatch16.12

ciscocisco_ios_xe_softwareMatch17.1

ciscocisco_ios_xe_softwareMatch17.2

ciscocisco_ios_xe_softwareMatch17.3

ciscocisco_ios_xe_softwareMatch17.4

ciscocisco_ios_xe_softwareMatchany

ciscoios_xe_sd-wanMatchany

ciscocisco_ios_xe_softwareMatch16.9.1

ciscocisco_ios_xe_softwareMatch16.9.2

ciscocisco_ios_xe_softwareMatch16.9.3

ciscocisco_ios_xe_softwareMatch16.9.4

ciscocisco_ios_xe_softwareMatch16.10.1

ciscocisco_ios_xe_softwareMatch16.10.1a

ciscocisco_ios_xe_softwareMatch16.10.1b

ciscocisco_ios_xe_softwareMatch16.10.1s

ciscocisco_ios_xe_softwareMatch16.10.1c

ciscocisco_ios_xe_softwareMatch16.10.1e

ciscocisco_ios_xe_softwareMatch16.10.1d

ciscocisco_ios_xe_softwareMatch16.10.2

ciscocisco_ios_xe_softwareMatch16.10.1f

ciscocisco_ios_xe_softwareMatch16.10.1g

ciscocisco_ios_xe_softwareMatch16.10.3

ciscocisco_ios_xe_softwareMatch16.11.1

ciscocisco_ios_xe_softwareMatch16.11.1a

ciscocisco_ios_xe_softwareMatch16.11.1b

ciscocisco_ios_xe_softwareMatch16.11.2

ciscocisco_ios_xe_softwareMatch16.11.1s

ciscocisco_ios_xe_softwareMatch16.11.1c

ciscocisco_ios_xe_softwareMatch16.12.1

ciscocisco_ios_xe_softwareMatch16.12.1s

ciscocisco_ios_xe_softwareMatch16.12.1a

ciscocisco_ios_xe_softwareMatch16.12.1c

ciscocisco_ios_xe_softwareMatch16.12.1w

ciscocisco_ios_xe_softwareMatch16.12.2

ciscocisco_ios_xe_softwareMatch16.12.1y

ciscocisco_ios_xe_softwareMatch16.12.2a

ciscocisco_ios_xe_softwareMatch16.12.3

ciscocisco_ios_xe_softwareMatch16.12.2s

ciscocisco_ios_xe_softwareMatch16.12.1x

ciscocisco_ios_xe_softwareMatch16.12.1t

ciscocisco_ios_xe_softwareMatch16.12.2t

ciscocisco_ios_xe_softwareMatch16.12.4

ciscocisco_ios_xe_softwareMatch16.12.3s

ciscocisco_ios_xe_softwareMatch16.12.1z

ciscocisco_ios_xe_softwareMatch16.12.3a

ciscocisco_ios_xe_softwareMatch16.12.4a

ciscocisco_ios_xe_softwareMatch16.12.5

ciscocisco_ios_xe_softwareMatch16.12.1z1

ciscocisco_ios_xe_softwareMatch16.12.5b

ciscocisco_ios_xe_softwareMatch17.1.1

ciscocisco_ios_xe_softwareMatch17.1.1a

ciscocisco_ios_xe_softwareMatch17.1.1s

ciscocisco_ios_xe_softwareMatch17.1.2

ciscocisco_ios_xe_softwareMatch17.1.1t

ciscocisco_ios_xe_softwareMatch17.1.3

ciscocisco_ios_xe_softwareMatch17.2.1

ciscocisco_ios_xe_softwareMatch17.2.1r

ciscocisco_ios_xe_softwareMatch17.2.1a

ciscocisco_ios_xe_softwareMatch17.2.1v

ciscocisco_ios_xe_softwareMatch17.2.2

ciscocisco_ios_xe_softwareMatch17.3.1

ciscocisco_ios_xe_softwareMatch17.3.2

ciscocisco_ios_xe_softwareMatch17.3.1a

ciscocisco_ios_xe_softwareMatch17.3.1w

ciscocisco_ios_xe_softwareMatch17.3.2a

ciscocisco_ios_xe_softwareMatch17.3.1x

ciscocisco_ios_xe_softwareMatch17.4.1

ciscocisco_ios_xe_softwareMatch17.4.1a

ciscocisco_ios_xe_softwareMatchany

ciscoios_xe_sd-wanMatchany

VendorProductVersionCPE
ciscocisco_ios_xe_software16.9cpe:2.3:a:cisco:cisco_ios_xe_software:16.9:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.10cpe:2.3:a:cisco:cisco_ios_xe_software:16.10:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.11cpe:2.3:a:cisco:cisco_ios_xe_software:16.11:*:*:*:*:*:*:*
ciscocisco_ios_xe_software16.12cpe:2.3:a:cisco:cisco_ios_xe_software:16.12:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.1cpe:2.3:a:cisco:cisco_ios_xe_software:17.1:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.2cpe:2.3:a:cisco:cisco_ios_xe_software:17.2:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3cpe:2.3:a:cisco:cisco_ios_xe_software:17.3:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.4cpe:2.3:a:cisco:cisco_ios_xe_software:17.4:*:*:*:*:*:*:*
ciscocisco_ios_xe_softwareanycpe:2.3:a:cisco:cisco_ios_xe_software:any:*:*:*:*:*:*:*
ciscoios_xe_sd-wananycpe:2.3:o:cisco:ios_xe_sd-wan:any:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	cisco_ios_xe_software	16.9	cpe:2.3:a:cisco:cisco_ios_xe_software:16.9:::::::*
cisco	cisco_ios_xe_software	16.10	cpe:2.3:a:cisco:cisco_ios_xe_software:16.10:::::::*
cisco	cisco_ios_xe_software	16.11	cpe:2.3:a:cisco:cisco_ios_xe_software:16.11:::::::*
cisco	cisco_ios_xe_software	16.12	cpe:2.3:a:cisco:cisco_ios_xe_software:16.12:::::::*
cisco	cisco_ios_xe_software	17.1	cpe:2.3:a:cisco:cisco_ios_xe_software:17.1:::::::*
cisco	cisco_ios_xe_software	17.2	cpe:2.3:a:cisco:cisco_ios_xe_software:17.2:::::::*
cisco	cisco_ios_xe_software	17.3	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3:::::::*
cisco	cisco_ios_xe_software	17.4	cpe:2.3:a:cisco:cisco_ios_xe_software:17.4:::::::*
cisco	cisco_ios_xe_software	any	cpe:2.3:a:cisco:cisco_ios_xe_software:any:::::::*
cisco	ios_xe_sd-wan	any	cpe:2.3:o:cisco:ios_xe_sd-wan:any:::::::*