CVE-2021-1383
Summary
| CVE | CVE-2021-1383 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-03-24 20:15:00 UTC |
| Updated | 2023-11-07 03:28:00 UTC |
| Description | Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges. |
Risk And Classification
Problem Types: CWE-88
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios Xe | 16.10.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1d | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1e | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1f | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1g | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.10.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.1b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.11.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1c | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1t | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1w | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1x | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1y | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1z | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1z1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.1za | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.2a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.2s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.2t | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.3a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.3s | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.4a | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.5 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.12.5b | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 16.9.4 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.1s | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.1t | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.1.3 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.2.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.2.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 17.2.1r | All | All | All |
| Operating System | Cisco | Ios Xe | 17.2.1v | All | All | All |
| Operating System | Cisco | Ios Xe | 17.2.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.1a | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.1w | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.1x | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.2 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.3.2a | All | All | All |
| Operating System | Cisco | Ios Xe | 17.4.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.4.1a | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE SD-WAN - Parameter Injection Vulnerabilities (CVE-2021-1383) · Advisory · orangecertcc/security-research · GitHub | MISC | github.com | |
| Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities | CISCO | tools.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 317194 Cisco Internetwork Operating System (IOS) XE SD-WAN Software Parameter Injection Vulnerabilities (cisco-sa-xesdwpinj-V4weeqzU)