Lucene search

[email protected]NVD:CVE-2021-34724

HistorySep 23, 2021 - 3:15 a.m.

CVE-2021-34724

2021-09-2303:15:18

CWE-284

[email protected]

web.nvd.nist.gov

cisco

ios xe

sd-wan

vulnerability

authenticated attacker

local

elevated privileges

arbitrary code

file system protection

bootflash directory

sensitive file

installer file

root user

configuration database

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

5.1%

JSON

A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root user. An attacker must be authenticated on an affected device as a PRIV15 user. This vulnerability is due to insufficient file system protection and the presence of a sensitive file in the bootflash directory on an affected device. An attacker could exploit this vulnerability by overwriting an installer file stored in the bootflash directory with arbitrary commands that can be executed with root-level privileges. A successful exploit could allow the attacker to read and write changes to the configuration database on the affected device.

Affected configurations

Nvd

Node

ciscoios_xe_sd-wanRange≤17.3.1a

AND

cisco1000_integrated_services_routerMatch-

cisco1100-4g\/6g_integrated_services_routerMatch-

cisco1100-4p_integrated_services_routerMatch-

cisco1100-8p_integrated_services_routerMatch-

cisco1100_integrated_services_routerMatch-

cisco1101-4p_integrated_services_routerMatch-

cisco1101_integrated_services_routerMatch-

cisco1109-2p_integrated_services_routerMatch-

cisco1109-4p_integrated_services_routerMatch-

cisco1109_integrated_services_routerMatch-

cisco1111x-8p_integrated_services_routerMatch-

cisco1111x_integrated_services_routerMatch-

cisco111x_integrated_services_routerMatch-

cisco1120_integrated_services_routerMatch-

cisco1160_integrated_services_routerMatch-

cisco4000_integrated_services_routerMatch-

cisco422_integrated_services_routerMatch-

cisco4221_integrated_services_routerMatch-

cisco4321_integrated_services_routerMatch-

cisco4331_integrated_services_routerMatch-

cisco4351_integrated_services_routerMatch-

cisco4431_integrated_services_routerMatch-

cisco4451-x_integrated_services_routerMatch-

cisco4451_integrated_services_routerMatch-

cisco4461_integrated_services_routerMatch-

ciscoasr_1000Match-

ciscoasr_1000-esp100Match-

ciscoasr_1000-xMatch-

ciscoasr_1000_seriesMatch-

ciscoasr_1000_series_route_processor_\(rp2\)Match-

ciscoasr_1000_series_route_processor_\(rp3\)Match-

ciscoasr_1001Match-

ciscoasr_1001-hxMatch-

ciscoasr_1001-hx_rMatch-

ciscoasr_1001-xMatch-

ciscoasr_1001-x_rMatch-

ciscoasr_1002Match-

ciscoasr_1002-hxMatch-

ciscoasr_1002-hx_rMatch-

ciscoasr_1002-xMatch-

ciscoasr_1002-x_rMatch-

ciscoasr_1004Match-

ciscoasr_1006Match-

ciscoasr_1006-xMatch-

ciscoasr_1009-xMatch-

ciscoasr_1013Match-

ciscoasr_1023Match-

ciscocsr_1000vMatch-

VendorProductVersionCPE
ciscoios_xe_sd-wan*cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:*
cisco1000_integrated_services_router-cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*
cisco1100-4g\/6g_integrated_services_router-cpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:*:*:*:*:*:*:*
cisco1100-4p_integrated_services_router-cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*
cisco1100-8p_integrated_services_router-cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*
cisco1100_integrated_services_router-cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*
cisco1101-4p_integrated_services_router-cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*
cisco1101_integrated_services_router-cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*
cisco1109-2p_integrated_services_router-cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*
cisco1109-4p_integrated_services_router-cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe_sd-wan	*	cpe:2.3:o:cisco:ios_xe_sd-wan::::::::
cisco	1000_integrated_services_router	-	cpe:2.3:h:cisco:1000_integrated_services_router:-:::::::*
cisco	1100-4g\/6g_integrated_services_router	-	cpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:::::::*
cisco	1100-4p_integrated_services_router	-	cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:::::::*
cisco	1100-8p_integrated_services_router	-	cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:::::::*
cisco	1100_integrated_services_router	-	cpe:2.3:h:cisco:1100_integrated_services_router:-:::::::*
cisco	1101-4p_integrated_services_router	-	cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:::::::*
cisco	1101_integrated_services_router	-	cpe:2.3:h:cisco:1101_integrated_services_router:-:::::::*
cisco	1109-2p_integrated_services_router	-	cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:::::::*
cisco	1109-4p_integrated_services_router	-	cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:::::::*

Rows per page:

1-10 of 491

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-privesc-VP4FG3jD

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:C/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2021-34724

prion1 cve1 cvelist1 cisco1