CVE-2021-1281: Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability
First published: Wed Mar 24 2021(Updated: )
A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerability by authenticating to the device as an administrative user and executing a sequence of commands. A successful exploit could allow the attacker to obtain access to the underlying operating system as the root user.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =16.9.1 | |
| Cisco IOS XE Software | =16.9.2 | |
| Cisco IOS XE Software | =16.9.3 | |
| Cisco IOS XE Software | =16.9.4 | |
| Cisco IOS XE Software | =16.10.1 | |
| Cisco IOS XE Software | =16.10.1a | |
| Cisco IOS XE Software | =16.10.1b | |
| Cisco IOS XE Software | =16.10.1c | |
| Cisco IOS XE Software | =16.10.1d | |
| Cisco IOS XE Software | =16.10.1e | |
| Cisco IOS XE Software | =16.10.1f | |
| Cisco IOS XE Software | =16.10.1g | |
| Cisco IOS XE Software | =16.10.1s | |
| Cisco IOS XE Software | =16.10.2 | |
| Cisco IOS XE Software | =16.10.3 | |
| Cisco IOS XE Software | =16.11.1 | |
| Cisco IOS XE Software | =16.11.1a | |
| Cisco IOS XE Software | =16.11.1b | |
| Cisco IOS XE Software | =16.11.1c | |
| Cisco IOS XE Software | =16.11.1s | |
| Cisco IOS XE Software | =16.11.2 | |
| Cisco IOS XE Software | =16.12.1 | |
| Cisco IOS XE Software | =16.12.1a | |
| Cisco IOS XE Software | =16.12.1c | |
| Cisco IOS XE Software | =16.12.1s | |
| Cisco IOS XE Software | =16.12.1t | |
| Cisco IOS XE Software | =16.12.1w | |
| Cisco IOS XE Software | =16.12.1x | |
| Cisco IOS XE Software | =16.12.1y | |
| Cisco IOS XE Software | =16.12.1z | |
| Cisco IOS XE Software | =16.12.1za | |
| Cisco IOS XE Software | =16.12.2 | |
| Cisco IOS XE Software | =16.12.2a | |
| Cisco IOS XE Software | =16.12.2s | |
| Cisco IOS XE Software | =16.12.2t | |
| Cisco IOS XE Software | =16.12.3 | |
| Cisco IOS XE Software | =16.12.3a | |
| Cisco IOS XE Software | =16.12.3s | |
| Cisco IOS XE Software | =16.12.4 | |
| Cisco IOS XE Software | =16.12.4a | |
| Cisco IOS XE Software | =17.1.1 | |
| Cisco IOS XE Software | =17.1.1a | |
| Cisco IOS XE Software | =17.1.1s | |
| Cisco IOS XE Software | =17.1.1t | |
| Cisco IOS XE Software | =17.1.2 | |
| Cisco IOS XE Software | =17.1.3 | |
| Cisco IOS XE Software | =17.2.1 | |
| Cisco IOS XE Software | =17.2.1a | |
| Cisco IOS XE Software | =17.2.1r | |
| Cisco IOS XE Software | =17.2.1v | |
| Cisco IOS XE Software | =17.2.2 | |
| Cisco IOS XE Software | =17.3.1 | |
| Cisco IOS XE Software | =17.3.1a | |
| Cisco IOS XE Software | =17.3.1w | |
| Cisco IOS XE Software | =17.3.2 | |
| Cisco IOS XE Software | =17.3.2a | |
| Cisco IOS XE Software | =17.4.1 | |
| Cisco IOS XE Software | =17.4.1a | |
| Cisco IOS XE Software | =17.4.1b |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-1281?
CVE-2021-1281 has a high severity rating due to its potential to allow authenticated local attackers to access the system as root.
How do I fix CVE-2021-1281?
To fix CVE-2021-1281, it is recommended to update to a patched version of Cisco IOS XE that addresses this vulnerability.
What versions of Cisco IOS XE are affected by CVE-2021-1281?
CVE-2021-1281 affects multiple versions of Cisco IOS XE including 16.9.x, 16.10.x, 16.11.x, 16.12.x, and 17.x series.
Who can exploit CVE-2021-1281?
Only authenticated local attackers can exploit CVE-2021-1281 to gain elevated privileges on affected systems.
What is the impact of exploiting CVE-2021-1281?
Exploiting CVE-2021-1281 can lead to unauthorized access to the underlying operating system of impacted devices.
- agent/type
- agent/weakness
- agent/author
- agent/title
- agent/references
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.9.1
- version/cisco ios xe/16.9.2
- version/cisco ios xe/16.9.3
- version/cisco ios xe/16.9.4
- version/cisco ios xe/16.10.1
- version/cisco ios xe/16.10.1a
- version/cisco ios xe/16.10.1b
- version/cisco ios xe/16.10.1c
- version/cisco ios xe/16.10.1d
- version/cisco ios xe/16.10.1e
- version/cisco ios xe/16.10.1f
- version/cisco ios xe/16.10.1g
- version/cisco ios xe/16.10.1s
- version/cisco ios xe/16.10.2
- version/cisco ios xe/16.10.3
- version/cisco ios xe/16.11.1
- version/cisco ios xe/16.11.1a
- version/cisco ios xe/16.11.1b
- version/cisco ios xe/16.11.1c
- version/cisco ios xe/16.11.1s
- version/cisco ios xe/16.11.2
- version/cisco ios xe/16.12.1
- version/cisco ios xe/16.12.1a
- version/cisco ios xe/16.12.1c
- version/cisco ios xe/16.12.1s
- version/cisco ios xe/16.12.1t
- version/cisco ios xe/16.12.1w
- version/cisco ios xe/16.12.1x
- version/cisco ios xe/16.12.1y
- version/cisco ios xe/16.12.1z
- version/cisco ios xe/16.12.1za
- version/cisco ios xe/16.12.2
- version/cisco ios xe/16.12.2a
- version/cisco ios xe/16.12.2s
- version/cisco ios xe/16.12.2t
- version/cisco ios xe/16.12.3
- version/cisco ios xe/16.12.3a
- version/cisco ios xe/16.12.3s
- version/cisco ios xe/16.12.4
- version/cisco ios xe/16.12.4a
- version/cisco ios xe/17.1.1
- version/cisco ios xe/17.1.1a
- version/cisco ios xe/17.1.1s
- version/cisco ios xe/17.1.1t
- version/cisco ios xe/17.1.2
- version/cisco ios xe/17.1.3
- version/cisco ios xe/17.2.1
- version/cisco ios xe/17.2.1a
- version/cisco ios xe/17.2.1r
- version/cisco ios xe/17.2.1v
- version/cisco ios xe/17.2.2
- version/cisco ios xe/17.3.1
- version/cisco ios xe/17.3.1a
- version/cisco ios xe/17.3.1w
- version/cisco ios xe/17.3.2
- version/cisco ios xe/17.3.2a
- version/cisco ios xe/17.4.1
- version/cisco ios xe/17.4.1a
- version/cisco ios xe/17.4.1b