Lucene search

CiscoCISCO-SA-SD-WAN-RHPBE34A

HistoryOct 20, 2021 - 4:00 p.m.

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

2021-10-2016:00:00

tools.cisco.com

vulnerability

cli

cisco

ios xe

sd-wan

software

command injection

authenticated

local attacker

arbitrary commands

root privileges

input validation

exploit

crafted input

operating system

software updates

security advisory.

EPSS

Percentile

5.2%

JSON

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges.

The vulnerability is due to insufficient input validation by the system CLI. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the system CLI. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-rhpbE34A [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-rhpbE34A”]

Affected configurations

Vulners

Node

ciscocisco_ios_xe_softwareMatch17.2

ciscocisco_ios_xe_softwareMatch17.2.1r

ciscocisco_ios_xe_softwareMatch17.2.1v

ciscocisco_ios_xe_softwareMatch17.2.2

ciscocisco_ios_xe_softwareMatch17.3

ciscocisco_ios_xe_softwareMatch17.3.1

ciscocisco_ios_xe_softwareMatch17.3.2

ciscocisco_ios_xe_softwareMatch17.3.3

ciscocisco_ios_xe_softwareMatch17.3.1a

ciscocisco_ios_xe_softwareMatch17.3.1w

ciscocisco_ios_xe_softwareMatch17.3.2a

ciscocisco_ios_xe_softwareMatch17.3.1x

ciscocisco_ios_xe_softwareMatch17.3.1z

ciscocisco_ios_xe_softwareMatch17.3.3a

ciscocisco_ios_xe_softwareMatch17.4

ciscocisco_ios_xe_softwareMatch17.4.1

ciscocisco_ios_xe_softwareMatch17.4.1a

ciscocisco_ios_xe_softwareMatch17.4.1b

ciscocisco_ios_xe_softwareMatch17.4.1c

ciscoios_xe_sd-wanMatch16.9

ciscoios_xe_sd-wanMatch16.9.1

ciscoios_xe_sd-wanMatch16.9.2

ciscoios_xe_sd-wanMatch16.9.3

ciscoios_xe_sd-wanMatch16.9.4

ciscoios_xe_sd-wanMatch16.10

ciscoios_xe_sd-wanMatch16.10.1

ciscoios_xe_sd-wanMatch16.10.2

ciscoios_xe_sd-wanMatch16.10.3

ciscoios_xe_sd-wanMatch16.10.3a

ciscoios_xe_sd-wanMatch16.10.3b

ciscoios_xe_sd-wanMatch16.10.4

ciscoios_xe_sd-wanMatch16.10.5

ciscoios_xe_sd-wanMatch16.10.6

ciscoios_xe_sd-wanMatch16.11

ciscoios_xe_sd-wanMatch16.11.1a

ciscoios_xe_sd-wanMatch16.11.1

ciscoios_xe_sd-wanMatch16.11.1b

ciscoios_xe_sd-wanMatch16.11.1d

ciscoios_xe_sd-wanMatch16.11.1f

ciscoios_xe_sd-wanMatch16.11.1s

ciscoios_xe_sd-wanMatch16.12

ciscoios_xe_sd-wanMatch16.12.1b

ciscoios_xe_sd-wanMatch16.12.1d

ciscoios_xe_sd-wanMatch16.12.1e

ciscoios_xe_sd-wanMatch16.12.2r

ciscoios_xe_sd-wanMatch16.12.1

ciscoios_xe_sd-wanMatch16.12.1a

ciscoios_xe_sd-wanMatch16.12.1b1

ciscoios_xe_sd-wanMatch16.12.1c

ciscoios_xe_sd-wanMatch16.12.3

ciscoios_xe_sd-wanMatch16.12.4

ciscoios_xe_sd-wanMatch16.12.4a

ciscoios_xe_sd-wanMatch16.12.5

ciscoios_xe_sd-wan_16.12.1b_when_installed_on_1100_series_industrial_integrated_services

ciscocloud_services_router_1000v_firmware

ciscoios_xe_sd-wan_16.10.4_when_installed_on_1000_series_integrated_services

ciscoasr_1000_series_software

ciscoios_xe_sd-wan_16.11.1_when_installed_on_4000_series_integrated_services

ciscointegrated_services_virtual_router_firmware

VendorProductVersionCPE
ciscocisco_ios_xe_software17.2cpe:2.3:a:cisco:cisco_ios_xe_software:17.2:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.2.1rcpe:2.3:a:cisco:cisco_ios_xe_software:17.2.1r:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.2.1vcpe:2.3:a:cisco:cisco_ios_xe_software:17.2.1v:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.2.2cpe:2.3:a:cisco:cisco_ios_xe_software:17.2.2:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3cpe:2.3:a:cisco:cisco_ios_xe_software:17.3:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3.1cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3.2cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.2:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3.3cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.3:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3.1acpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1a:*:*:*:*:*:*:*
ciscocisco_ios_xe_software17.3.1wcpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1w:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	cisco_ios_xe_software	17.2	cpe:2.3:a:cisco:cisco_ios_xe_software:17.2:::::::*
cisco	cisco_ios_xe_software	17.2.1r	cpe:2.3:a:cisco:cisco_ios_xe_software:17.2.1r:::::::*
cisco	cisco_ios_xe_software	17.2.1v	cpe:2.3:a:cisco:cisco_ios_xe_software:17.2.1v:::::::*
cisco	cisco_ios_xe_software	17.2.2	cpe:2.3:a:cisco:cisco_ios_xe_software:17.2.2:::::::*
cisco	cisco_ios_xe_software	17.3	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3:::::::*
cisco	cisco_ios_xe_software	17.3.1	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1:::::::*
cisco	cisco_ios_xe_software	17.3.2	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.2:::::::*
cisco	cisco_ios_xe_software	17.3.3	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.3:::::::*
cisco	cisco_ios_xe_software	17.3.1a	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1a:::::::*
cisco	cisco_ios_xe_software	17.3.1w	cpe:2.3:a:cisco:cisco_ios_xe_software:17.3.1w:::::::*