CVE-2021-1385

🗓️ 24 Mar 2021 20:15:13Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

Vulnerability in Cisco IOx allows directory traversa

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, arises from incorrect restrictions on path names in the restricted access directory. This allows attackers to compromise the confidentiality and integrity of the protected information.	6 Apr 202100:00	–	bdu_fstec
Cisco	Cisco IOx Application Environment Path Traversal Vulnerability	24 Mar 202116:00	–	cisco
Tenable Nessus	Cisco IOS Software IOx Application Environment Path Traversal (cisco-sa-iox-pt-hWGcPf7g)	8 Sep 202100:00	–	nessus
Tenable Nessus	Cisco IOS XE Software IOx Application Environment Path Traversal (cisco-sa-iox-pt-hWGcPf7g)	8 Sep 202100:00	–	nessus
CNNVD	Cisco Iox 路径遍历漏洞	24 Mar 202100:00	–	cnnvd
CNVD	Cisco IOx Application Directory Traversal Vulnerability	26 Mar 202100:00	–	cnvd
CVE	CVE-2021-1385	24 Mar 202120:07	–	cve
Cvelist	CVE-2021-1385 Cisco IOx Application Environment Path Traversal Vulnerability	24 Mar 202120:07	–	cvelist
EUVD	EUVD-2021-6852	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation Stratix Devices Containing Cisco IOS	27 Oct 202206:00	–	ics

NVD

Node

cisco iosMatch15.8(3)m2a

OR

cisco iosMatch15.8(3)m3

OR

cisco iosMatch15.8(3)m4

OR

cisco iosMatch15.8(3)m5

OR

cisco iosMatch15.8(3)m6

OR

cisco iosMatch15.9(3)m

OR

cisco iosMatch15.9(3)m1

OR

cisco iosMatch15.9(3)m2

OR

cisco iosMatch15.9(3)m2a

OR

cisco iosMatch15.9(3)m3

OR

cisco ios_xeMatch16.11.1

OR

cisco ios_xeMatch16.11.1a

OR

cisco ios_xeMatch16.11.1b

OR

cisco ios_xeMatch16.11.1c

OR

cisco ios_xeMatch16.11.1s

OR

cisco ios_xeMatch16.11.2

OR

cisco ios_xeMatch16.12.1

OR

cisco ios_xeMatch16.12.1a

OR

cisco ios_xeMatch16.12.1c

OR

cisco ios_xeMatch16.12.1s

OR

cisco ios_xeMatch16.12.1t

OR

cisco ios_xeMatch16.12.1w

OR

cisco ios_xeMatch16.12.1x

OR

cisco ios_xeMatch16.12.1y

OR

cisco ios_xeMatch16.12.1z

OR

cisco ios_xeMatch16.12.1z1

OR

cisco ios_xeMatch16.12.1za

OR

cisco ios_xeMatch16.12.2

OR

cisco ios_xeMatch16.12.2a

OR

cisco ios_xeMatch16.12.2s

OR

cisco ios_xeMatch16.12.2t

OR

cisco ios_xeMatch16.12.3

OR

cisco ios_xeMatch16.12.3a

OR

cisco ios_xeMatch16.12.3s

OR

cisco ios_xeMatch16.12.4

OR

cisco ios_xeMatch16.12.4a

OR

cisco ios_xeMatch16.12.5

OR

cisco ios_xeMatch17.1.1

OR

cisco ios_xeMatch17.1.1a

OR

cisco ios_xeMatch17.1.1s

OR

cisco ios_xeMatch17.1.1t

OR

cisco ios_xeMatch17.1.2

OR

cisco ios_xeMatch17.1.3

OR

cisco ios_xeMatch17.2.1

OR

cisco ios_xeMatch17.2.1a

OR

cisco ios_xeMatch17.2.1r

OR

cisco ios_xeMatch17.2.1v

OR

cisco ios_xeMatch17.2.2

OR

cisco ios_xeMatch17.3.1

OR

cisco ios_xeMatch17.3.1a

OR

cisco ios_xeMatch17.3.1w

OR

cisco ios_xeMatch17.3.1x

OR

cisco ios_xeMatch17.3.2

OR

cisco ios_xeMatch17.3.2a

OR

cisco ios_xeMatch17.4.1

OR

cisco ios_xeMatch17.4.1a

OR

cisco ios_xeMatch17.4.1b

Source	Link
github	www.github.com/orangecertcc/security-research/security/advisories/GHSA-hhfw-6cm2-v3w5
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g

17 Jun 2026 03:31Current

CVSS 26

CVSS 3.16.5

EPSS0.02671

cisco vulnerability directory traversal api operating system