CVE-2021-1390: Cisco IOS XE Software Local Privilege Escalation Vulnerability
First published: Wed Mar 24 2021(Updated: )
A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This vulnerability exists because the affected software permits modification of the run-time memory of an affected device under specific circumstances. An attacker could exploit this vulnerability by authenticating to the affected device and issuing a specific diagnostic test command at the CLI. A successful exploit could trigger a logic error in the code that was designed to restrict run-time memory modifications. The attacker could take advantage of this logic error to overwrite system memory locations and execute arbitrary code on the underlying Linux operating system (OS) of the affected device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =16.8.1 | |
| Cisco IOS XE Software | =16.8.1a | |
| Cisco IOS XE Software | =16.8.1b | |
| Cisco IOS XE Software | =16.8.1c | |
| Cisco IOS XE Software | =16.8.1d | |
| Cisco IOS XE Software | =16.8.1e | |
| Cisco IOS XE Software | =16.8.1s | |
| Cisco IOS XE Software | =16.8.2 | |
| Cisco IOS XE Software | =16.8.3 | |
| Cisco IOS XE Software | =16.9.1 | |
| Cisco IOS XE Software | =16.9.1a | |
| Cisco IOS XE Software | =16.9.1b | |
| Cisco IOS XE Software | =16.9.1c | |
| Cisco IOS XE Software | =16.9.1d | |
| Cisco IOS XE Software | =16.9.1s | |
| Cisco IOS XE Software | =16.9.2 | |
| Cisco IOS XE Software | =16.9.2a | |
| Cisco IOS XE Software | =16.9.2s | |
| Cisco IOS XE Software | =16.9.3 | |
| Cisco IOS XE Software | =16.9.3a | |
| Cisco IOS XE Software | =16.9.3h | |
| Cisco IOS XE Software | =16.9.3s | |
| Cisco IOS XE Software | =16.9.4 | |
| Cisco IOS XE Software | =16.9.4c | |
| Cisco IOS XE Software | =16.9.5 | |
| Cisco IOS XE Software | =16.9.5f | |
| Cisco IOS XE Software | =16.9.6 | |
| Cisco IOS XE Software | =16.10.1 | |
| Cisco IOS XE Software | =16.10.1a | |
| Cisco IOS XE Software | =16.10.1b | |
| Cisco IOS XE Software | =16.10.1c | |
| Cisco IOS XE Software | =16.10.1d | |
| Cisco IOS XE Software | =16.10.1e | |
| Cisco IOS XE Software | =16.10.1f | |
| Cisco IOS XE Software | =16.10.1g | |
| Cisco IOS XE Software | =16.10.1s | |
| Cisco IOS XE Software | =16.10.2 | |
| Cisco IOS XE Software | =16.10.3 | |
| Cisco IOS XE Software | =16.11.1 | |
| Cisco IOS XE Software | =16.11.1a | |
| Cisco IOS XE Software | =16.11.1b | |
| Cisco IOS XE Software | =16.11.1c | |
| Cisco IOS XE Software | =16.11.1s | |
| Cisco IOS XE Software | =16.11.2 | |
| Cisco IOS XE Software | =16.12.1 | |
| Cisco IOS XE Software | =16.12.1a | |
| Cisco IOS XE Software | =16.12.1c | |
| Cisco IOS XE Software | =16.12.1s | |
| Cisco IOS XE Software | =16.12.1t | |
| Cisco IOS XE Software | =16.12.1w | |
| Cisco IOS XE Software | =16.12.1x | |
| Cisco IOS XE Software | =16.12.1y | |
| Cisco IOS XE Software | =16.12.1z | |
| Cisco IOS XE Software | =16.12.1za | |
| Cisco IOS XE Software | =16.12.2 | |
| Cisco IOS XE Software | =16.12.2a | |
| Cisco IOS XE Software | =16.12.2s | |
| Cisco IOS XE Software | =16.12.2t | |
| Cisco IOS XE Software | =16.12.3 | |
| Cisco IOS XE Software | =16.12.3a | |
| Cisco IOS XE Software | =16.12.3s | |
| Cisco IOS XE Software | =16.12.4 | |
| Cisco IOS XE Software | =16.12.4a | |
| Cisco IOS XE Software | =17.1.1 | |
| Cisco IOS XE Software | =17.1.1a | |
| Cisco IOS XE Software | =17.1.1s | |
| Cisco IOS XE Software | =17.1.1t | |
| Cisco IOS XE Software | =17.1.2 | |
| Cisco IOS XE Software | =17.2.1 | |
| Cisco IOS XE Software | =17.2.1a | |
| Cisco IOS XE Software | =17.2.1r | |
| Cisco IOS XE Software | =17.2.1v | |
| Cisco IOS XE Software | =17.2.2 | |
| Cisco IOS XE Software | =17.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-1390?
CVE-2021-1390 is rated as a critical severity vulnerability.
How do I fix CVE-2021-1390?
To fix CVE-2021-1390, update your Cisco IOS XE Software to a version that is not affected by this vulnerability.
What types of devices are affected by CVE-2021-1390?
CVE-2021-1390 affects Cisco devices running vulnerable versions of Cisco IOS XE Software.
What can an attacker do with CVE-2021-1390?
An authenticated local attacker can exploit CVE-2021-1390 to execute arbitrary code on the affected device.
Who is at risk for CVE-2021-1390?
Any organization using vulnerable Cisco IOS XE versions with authenticated access is at risk for CVE-2021-1390.
- agent/type
- agent/references
- agent/weakness
- agent/title
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.8.1
- version/cisco ios xe/16.8.1a
- version/cisco ios xe/16.8.1b
- version/cisco ios xe/16.8.1c
- version/cisco ios xe/16.8.1d
- version/cisco ios xe/16.8.1e
- version/cisco ios xe/16.8.1s
- version/cisco ios xe/16.8.2
- version/cisco ios xe/16.8.3
- version/cisco ios xe/16.9.1
- version/cisco ios xe/16.9.1a
- version/cisco ios xe/16.9.1b
- version/cisco ios xe/16.9.1c
- version/cisco ios xe/16.9.1d
- version/cisco ios xe/16.9.1s
- version/cisco ios xe/16.9.2
- version/cisco ios xe/16.9.2a
- version/cisco ios xe/16.9.2s
- version/cisco ios xe/16.9.3
- version/cisco ios xe/16.9.3a
- version/cisco ios xe/16.9.3h
- version/cisco ios xe/16.9.3s
- version/cisco ios xe/16.9.4
- version/cisco ios xe/16.9.4c
- version/cisco ios xe/16.9.5
- version/cisco ios xe/16.9.5f
- version/cisco ios xe/16.9.6
- version/cisco ios xe/16.10.1
- version/cisco ios xe/16.10.1a
- version/cisco ios xe/16.10.1b
- version/cisco ios xe/16.10.1c
- version/cisco ios xe/16.10.1d
- version/cisco ios xe/16.10.1e
- version/cisco ios xe/16.10.1f
- version/cisco ios xe/16.10.1g
- version/cisco ios xe/16.10.1s
- version/cisco ios xe/16.10.2
- version/cisco ios xe/16.10.3
- version/cisco ios xe/16.11.1
- version/cisco ios xe/16.11.1a
- version/cisco ios xe/16.11.1b
- version/cisco ios xe/16.11.1c
- version/cisco ios xe/16.11.1s
- version/cisco ios xe/16.11.2
- version/cisco ios xe/16.12.1
- version/cisco ios xe/16.12.1a
- version/cisco ios xe/16.12.1c
- version/cisco ios xe/16.12.1s
- version/cisco ios xe/16.12.1t
- version/cisco ios xe/16.12.1w
- version/cisco ios xe/16.12.1x
- version/cisco ios xe/16.12.1y
- version/cisco ios xe/16.12.1z
- version/cisco ios xe/16.12.1za
- version/cisco ios xe/16.12.2
- version/cisco ios xe/16.12.2a
- version/cisco ios xe/16.12.2s
- version/cisco ios xe/16.12.2t
- version/cisco ios xe/16.12.3
- version/cisco ios xe/16.12.3a
- version/cisco ios xe/16.12.3s
- version/cisco ios xe/16.12.4
- version/cisco ios xe/16.12.4a
- version/cisco ios xe/17.1.1
- version/cisco ios xe/17.1.1a
- version/cisco ios xe/17.1.1s
- version/cisco ios xe/17.1.1t
- version/cisco ios xe/17.1.2
- version/cisco ios xe/17.2.1
- version/cisco ios xe/17.2.1a
- version/cisco ios xe/17.2.1r
- version/cisco ios xe/17.2.1v
- version/cisco ios xe/17.2.2
- version/cisco ios xe/17.2.3