CVE-2021-1383: Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
First published: Wed Mar 24 2021(Updated: )
Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Web UI | =16.9.1 | |
| Cisco IOS XE Web UI | =16.9.2 | |
| Cisco IOS XE Web UI | =16.9.3 | |
| Cisco IOS XE Web UI | =16.9.4 | |
| Cisco IOS XE Web UI | =16.10.1 | |
| Cisco IOS XE Web UI | =16.10.1a | |
| Cisco IOS XE Web UI | =16.10.1b | |
| Cisco IOS XE Web UI | =16.10.1c | |
| Cisco IOS XE Web UI | =16.10.1d | |
| Cisco IOS XE Web UI | =16.10.1e | |
| Cisco IOS XE Web UI | =16.10.1f | |
| Cisco IOS XE Web UI | =16.10.1g | |
| Cisco IOS XE Web UI | =16.10.1s | |
| Cisco IOS XE Web UI | =16.10.2 | |
| Cisco IOS XE Web UI | =16.10.3 | |
| Cisco IOS XE Web UI | =16.11.1 | |
| Cisco IOS XE Web UI | =16.11.1a | |
| Cisco IOS XE Web UI | =16.11.1b | |
| Cisco IOS XE Web UI | =16.11.1c | |
| Cisco IOS XE Web UI | =16.11.1s | |
| Cisco IOS XE Web UI | =16.11.2 | |
| Cisco IOS XE Web UI | =16.12.1 | |
| Cisco IOS XE Web UI | =16.12.1a | |
| Cisco IOS XE Web UI | =16.12.1c | |
| Cisco IOS XE Web UI | =16.12.1s | |
| Cisco IOS XE Web UI | =16.12.1t | |
| Cisco IOS XE Web UI | =16.12.1w | |
| Cisco IOS XE Web UI | =16.12.1x | |
| Cisco IOS XE Web UI | =16.12.1y | |
| Cisco IOS XE Web UI | =16.12.1z | |
| Cisco IOS XE Web UI | =16.12.1z1 | |
| Cisco IOS XE Web UI | =16.12.1za | |
| Cisco IOS XE Web UI | =16.12.2 | |
| Cisco IOS XE Web UI | =16.12.2a | |
| Cisco IOS XE Web UI | =16.12.2s | |
| Cisco IOS XE Web UI | =16.12.2t | |
| Cisco IOS XE Web UI | =16.12.3 | |
| Cisco IOS XE Web UI | =16.12.3a | |
| Cisco IOS XE Web UI | =16.12.3s | |
| Cisco IOS XE Web UI | =16.12.4 | |
| Cisco IOS XE Web UI | =16.12.4a | |
| Cisco IOS XE Web UI | =16.12.5 | |
| Cisco IOS XE Web UI | =16.12.5b | |
| Cisco IOS XE Web UI | =17.1.1 | |
| Cisco IOS XE Web UI | =17.1.1a | |
| Cisco IOS XE Web UI | =17.1.1s | |
| Cisco IOS XE Web UI | =17.1.1t | |
| Cisco IOS XE Web UI | =17.1.2 | |
| Cisco IOS XE Web UI | =17.1.3 | |
| Cisco IOS XE Web UI | =17.2.1 | |
| Cisco IOS XE Web UI | =17.2.1a | |
| Cisco IOS XE Web UI | =17.2.1r | |
| Cisco IOS XE Web UI | =17.2.1v | |
| Cisco IOS XE Web UI | =17.2.2 | |
| Cisco IOS XE Web UI | =17.3.1 | |
| Cisco IOS XE Web UI | =17.3.1a | |
| Cisco IOS XE Web UI | =17.3.1w | |
| Cisco IOS XE Web UI | =17.3.1x | |
| Cisco IOS XE Web UI | =17.3.2 | |
| Cisco IOS XE Web UI | =17.3.2a | |
| Cisco IOS XE Web UI | =17.4.1 | |
| Cisco IOS XE Web UI | =17.4.1a | |
| Cisco IOS XE sd-wan |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-1383?
CVE-2021-1383 has a medium severity rating, allowing an authenticated local attacker to gain root privileges.
How do I fix CVE-2021-1383?
To mitigate CVE-2021-1383, update to a Cisco IOS XE version that addresses this vulnerability.
What products are affected by CVE-2021-1383?
CVE-2021-1383 affects multiple versions of Cisco IOS XE SD-WAN software including versions 16.9.1 to 17.4.1.
Who can exploit CVE-2021-1383?
An authenticated local attacker can exploit CVE-2021-1383 due to insufficient input validation.
What is the impact of CVE-2021-1383?
The impact of CVE-2021-1383 allows an attacker to access the underlying operating system with root privileges.
- agent/references
- agent/type
- agent/weakness
- agent/title
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe web ui
- version/cisco ios xe web ui/16.9.1
- version/cisco ios xe web ui/16.9.2
- version/cisco ios xe web ui/16.9.3
- version/cisco ios xe web ui/16.9.4
- version/cisco ios xe web ui/16.10.1
- version/cisco ios xe web ui/16.10.1a
- version/cisco ios xe web ui/16.10.1b
- version/cisco ios xe web ui/16.10.1c
- version/cisco ios xe web ui/16.10.1d
- version/cisco ios xe web ui/16.10.1e
- version/cisco ios xe web ui/16.10.1f
- version/cisco ios xe web ui/16.10.1g
- version/cisco ios xe web ui/16.10.1s
- version/cisco ios xe web ui/16.10.2
- version/cisco ios xe web ui/16.10.3
- version/cisco ios xe web ui/16.11.1
- version/cisco ios xe web ui/16.11.1a
- version/cisco ios xe web ui/16.11.1b
- version/cisco ios xe web ui/16.11.1c
- version/cisco ios xe web ui/16.11.1s
- version/cisco ios xe web ui/16.11.2
- version/cisco ios xe web ui/16.12.1
- version/cisco ios xe web ui/16.12.1a
- version/cisco ios xe web ui/16.12.1c
- version/cisco ios xe web ui/16.12.1s
- version/cisco ios xe web ui/16.12.1t
- version/cisco ios xe web ui/16.12.1w
- version/cisco ios xe web ui/16.12.1x
- version/cisco ios xe web ui/16.12.1y
- version/cisco ios xe web ui/16.12.1z
- version/cisco ios xe web ui/16.12.1z1
- version/cisco ios xe web ui/16.12.1za
- version/cisco ios xe web ui/16.12.2
- version/cisco ios xe web ui/16.12.2a
- version/cisco ios xe web ui/16.12.2s
- version/cisco ios xe web ui/16.12.2t
- version/cisco ios xe web ui/16.12.3
- version/cisco ios xe web ui/16.12.3a
- version/cisco ios xe web ui/16.12.3s
- version/cisco ios xe web ui/16.12.4
- version/cisco ios xe web ui/16.12.4a
- version/cisco ios xe web ui/16.12.5
- version/cisco ios xe web ui/16.12.5b
- version/cisco ios xe web ui/17.1.1
- version/cisco ios xe web ui/17.1.1a
- version/cisco ios xe web ui/17.1.1s
- version/cisco ios xe web ui/17.1.1t
- version/cisco ios xe web ui/17.1.2
- version/cisco ios xe web ui/17.1.3
- version/cisco ios xe web ui/17.2.1
- version/cisco ios xe web ui/17.2.1a
- version/cisco ios xe web ui/17.2.1r
- version/cisco ios xe web ui/17.2.1v
- version/cisco ios xe web ui/17.2.2
- version/cisco ios xe web ui/17.3.1
- version/cisco ios xe web ui/17.3.1a
- version/cisco ios xe web ui/17.3.1w
- version/cisco ios xe web ui/17.3.1x
- version/cisco ios xe web ui/17.3.2
- version/cisco ios xe web ui/17.3.2a
- version/cisco ios xe web ui/17.4.1
- version/cisco ios xe web ui/17.4.1a
- canonical/cisco ios xe sd-wan