CVE-2021-1383: Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1383?
CVE-2021-1383 has a medium severity rating, allowing an authenticated local attacker to gain root privileges.
How do I fix CVE-2021-1383?
To mitigate CVE-2021-1383, update to a Cisco IOS XE version that addresses this vulnerability.
What products are affected by CVE-2021-1383?
CVE-2021-1383 affects multiple versions of Cisco IOS XE SD-WAN software including versions 16.9.1 to 17.4.1.
Who can exploit CVE-2021-1383?
An authenticated local attacker can exploit CVE-2021-1383 due to insufficient input validation.
What is the impact of CVE-2021-1383?
The impact of CVE-2021-1383 allows an attacker to access the underlying operating system with root privileges.