CVE-2021-1392: Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability

First published: Wed Mar 24 2021(Updated: )

A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS	=15.0\(1\)ey
Cisco IOS	=15.0\(1\)ey1
Cisco IOS	=15.0\(1\)ey2
Cisco IOS	=15.1\(3\)svs
Cisco IOS	=15.1\(3\)svt1
Cisco IOS	=15.2\(1\)ey
Cisco IOS	=15.2\(2\)e
Cisco IOS	=15.2\(2\)e1
Cisco IOS	=15.2\(2\)e2
Cisco IOS	=15.2\(2\)e3
Cisco IOS	=15.2\(2\)e4
Cisco IOS	=15.2\(2\)e5
Cisco IOS	=15.2\(2\)e5a
Cisco IOS	=15.2\(2\)e5b
Cisco IOS	=15.2\(2\)e6
Cisco IOS	=15.2\(2\)e7
Cisco IOS	=15.2\(2\)e7b
Cisco IOS	=15.2\(2\)e8
Cisco IOS	=15.2\(2\)e9
Cisco IOS	=15.2\(2\)e10
Cisco IOS	=15.2\(2\)ea
Cisco IOS	=15.2\(2\)ea1
Cisco IOS	=15.2\(2\)ea2
Cisco IOS	=15.2\(2\)ea3
Cisco IOS	=15.2\(2\)eb
Cisco IOS	=15.2\(2\)eb1
Cisco IOS	=15.2\(2\)eb2
Cisco IOS	=15.2\(2a\)e2
Cisco IOS	=15.2\(2b\)e
Cisco IOS	=15.2\(3\)e1
Cisco IOS	=15.2\(3\)e2
Cisco IOS	=15.2\(3\)e3
Cisco IOS	=15.2\(3\)e4
Cisco IOS	=15.2\(3\)e5
Cisco IOS	=15.2\(3\)ea
Cisco IOS	=15.2\(4\)e5a
Cisco IOS	=15.2\(4\)ea
Cisco IOS	=15.2\(4\)ea1
Cisco IOS	=15.2\(4\)ea2
Cisco IOS	=15.2\(4\)ea3
Cisco IOS	=15.2\(4\)ea4
Cisco IOS	=15.2\(4\)ea5
Cisco IOS	=15.2\(4\)ea6
Cisco IOS	=15.2\(4\)ea7
Cisco IOS	=15.2\(4\)ea8
Cisco IOS	=15.2\(4\)ea9
Cisco IOS	=15.2\(4\)ea9a
Cisco IOS	=15.2\(4\)ea10
Cisco IOS	=15.2\(4\)ec1
Cisco IOS	=15.2\(4\)ec2
Cisco IOS	=15.2\(4\)jaz
Cisco IOS	=15.2\(5\)e
Cisco IOS	=15.2\(5\)e1
Cisco IOS	=15.2\(5\)e2
Cisco IOS	=15.2\(5\)e2b
Cisco IOS	=15.2\(5\)e2c
Cisco IOS	=15.2\(5\)ea
Cisco IOS	=15.2\(5a\)e1
Cisco IOS	=15.2\(6\)e
Cisco IOS	=15.2\(6\)e0a
Cisco IOS	=15.2\(6\)e0c
Cisco IOS	=15.2\(6\)e1
Cisco IOS	=15.2\(6\)e1a
Cisco IOS	=15.2\(6\)e1s
Cisco IOS	=15.2\(7\)e0b
Cisco IOS	=15.2\(7a\)e0b
Cisco IOS	=15.2\(7b\)e0b
Cisco IOS	=15.3\(3\)ja1
Cisco IOS	=15.3\(3\)ja4
Cisco IOS	=15.3\(3\)ja5
Cisco IOS	=15.3\(3\)ja6
Cisco IOS	=15.3\(3\)ja7
Cisco IOS	=15.3\(3\)ja8
Cisco IOS	=15.3\(3\)ja10
Cisco IOS	=15.3\(3\)ja11
Cisco IOS	=15.3\(3\)ja12
Cisco IOS	=15.3\(3\)jaa
Cisco IOS	=15.3\(3\)jax
Cisco IOS	=15.3\(3\)jax1
Cisco IOS	=15.3\(3\)jax2
Cisco IOS	=15.3\(3\)jb
Cisco IOS	=15.3\(3\)jbb
Cisco IOS	=15.3\(3\)jbb1
Cisco IOS	=15.3\(3\)jbb2
Cisco IOS	=15.3\(3\)jbb4
Cisco IOS	=15.3\(3\)jbb5
Cisco IOS	=15.3\(3\)jbb6
Cisco IOS	=15.3\(3\)jbb6a
Cisco IOS	=15.3\(3\)jbb8
Cisco IOS	=15.3\(3\)jc
Cisco IOS	=15.3\(3\)jc1
Cisco IOS	=15.3\(3\)jc2
Cisco IOS	=15.3\(3\)jc3
Cisco IOS	=15.3\(3\)jc4
Cisco IOS	=15.3\(3\)jc5
Cisco IOS	=15.3\(3\)jc6
Cisco IOS	=15.3\(3\)jc8
Cisco IOS	=15.3\(3\)jc9
Cisco IOS	=15.3\(3\)jc14
Cisco IOS	=15.3\(3\)jd
Cisco IOS	=15.3\(3\)jd2
Cisco IOS	=15.3\(3\)jd3
Cisco IOS	=15.3\(3\)jd4
Cisco IOS	=15.3\(3\)jd5
Cisco IOS	=15.3\(3\)jd6
Cisco IOS	=15.3\(3\)jd7
Cisco IOS	=15.3\(3\)jd8
Cisco IOS	=15.3\(3\)jd9
Cisco IOS	=15.3\(3\)jd11
Cisco IOS	=15.3\(3\)jd12
Cisco IOS	=15.3\(3\)jd13
Cisco IOS	=15.3\(3\)jd14
Cisco IOS	=15.3\(3\)jd16
Cisco IOS	=15.3\(3\)jd17
Cisco IOS	=15.3\(3\)je
Cisco IOS	=15.3\(3\)jf
Cisco IOS	=15.3\(3\)jf1
Cisco IOS	=15.3\(3\)jf2
Cisco IOS	=15.3\(3\)jf4
Cisco IOS	=15.3\(3\)jf5
Cisco IOS	=15.3\(3\)jf6
Cisco IOS	=15.3\(3\)jf7
Cisco IOS	=15.3\(3\)jf8
Cisco IOS	=15.3\(3\)jf9
Cisco IOS	=15.3\(3\)jf10
Cisco IOS	=15.3\(3\)jf11
Cisco IOS	=15.3\(3\)jf12
Cisco IOS	=15.3\(3\)jf12i
Cisco IOS	=15.3\(3\)jf13
Cisco IOS	=15.3\(3\)jg
Cisco IOS	=15.3\(3\)jg1
Cisco IOS	=15.3\(3\)jh
Cisco IOS	=15.3\(3\)jh1
Cisco IOS	=15.3\(3\)ji1
Cisco IOS	=15.3\(3\)ji3
Cisco IOS	=15.3\(3\)ji4
Cisco IOS	=15.3\(3\)ji5
Cisco IOS	=15.3\(3\)ji6
Cisco IOS	=15.3\(3\)jj
Cisco IOS	=15.3\(3\)jj1
Cisco IOS	=15.3\(3\)jk
Cisco IOS	=15.3\(3\)jk1
Cisco IOS	=15.3\(3\)jk1t
Cisco IOS	=15.3\(3\)jk2
Cisco IOS	=15.3\(3\)jk2a
Cisco IOS	=15.3\(3\)jk3
Cisco IOS	=15.3\(3\)jk4
Cisco IOS	=15.3\(3\)jn
Cisco IOS	=15.3\(3\)jn3
Cisco IOS	=15.3\(3\)jn4
Cisco IOS	=15.3\(3\)jn6
Cisco IOS	=15.3\(3\)jn7
Cisco IOS	=15.3\(3\)jn8
Cisco IOS	=15.3\(3\)jn9
Cisco IOS	=15.3\(3\)jn11
Cisco IOS	=15.3\(3\)jn13
Cisco IOS	=15.3\(3\)jn14
Cisco IOS	=15.3\(3\)jn15
Cisco IOS	=15.3\(3\)jnb
Cisco IOS	=15.3\(3\)jnb1
Cisco IOS	=15.3\(3\)jnb2
Cisco IOS	=15.3\(3\)jnb3
Cisco IOS	=15.3\(3\)jnb4
Cisco IOS	=15.3\(3\)jnb5
Cisco IOS	=15.3\(3\)jnb6
Cisco IOS	=15.3\(3\)jnc
Cisco IOS	=15.3\(3\)jnc1
Cisco IOS	=15.3\(3\)jnc2
Cisco IOS	=15.3\(3\)jnc3
Cisco IOS	=15.3\(3\)jnc4
Cisco IOS	=15.3\(3\)jnd
Cisco IOS	=15.3\(3\)jnd1
Cisco IOS	=15.3\(3\)jnd2
Cisco IOS	=15.3\(3\)jnd3
Cisco IOS	=15.3\(3\)jnp
Cisco IOS	=15.3\(3\)jnp1
Cisco IOS	=15.3\(3\)jnp3
Cisco IOS	=15.3\(3\)jpb
Cisco IOS	=15.3\(3\)jpb1
Cisco IOS	=15.3\(3\)jpc
Cisco IOS	=15.3\(3\)jpc1
Cisco IOS	=15.3\(3\)jpc2
Cisco IOS	=15.3\(3\)jpc3
Cisco IOS	=15.3\(3\)jpc5
Cisco IOS	=15.3\(3\)jpd
Cisco IOS XE	=3.3.0xo
Cisco IOS XE	=3.3.1xo
Cisco IOS XE	=3.3.2xo
Cisco IOS XE	=3.6.5be
Cisco IOS XE	=3.7.4e
Cisco IOS XE	=3.7.5e
Cisco IOS XE	=16.9.1
Cisco IOS XE	=16.9.1d
Cisco IOS XE	=16.10.1
Cisco IOS XE	=16.10.1e
Cisco IOS XE	=16.11.1
Cisco IOS XE	=16.11.1a
Cisco IOS XE	=16.11.1c
Cisco IOS XE	=16.11.1s
Cisco IOS XE	=16.11.2
Cisco IOS XE	=16.12.1
Cisco IOS XE	=16.12.1c
Cisco IOS XE	=16.12.1s
Cisco IOS XE	=16.12.2
Cisco IOS XE	=16.12.2s
Cisco IOS XE	=16.12.2t
Cisco IOS XE	=16.12.3
Cisco IOS XE	=16.12.3s
Cisco IOS XE	=16.12.4
Cisco IOS XE	=17.1.1
Cisco IOS XE	=17.1.1s
Cisco IOS XE	=17.1.1t
Cisco IOS XE	=17.1.2
Cisco IOS XE	=17.2.1

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-SAP-OPLbze68

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/references
agent/weakness
agent/title
agent/last-modified-date
agent/severity
agent/tags
agent/author
agent/description
agent/first-publish-date
agent/event
vendor/cisco
canonical/cisco ios
version/cisco ios/15.0\(1\)ey
version/cisco ios/15.0\(1\)ey1
version/cisco ios/15.0\(1\)ey2
version/cisco ios/15.1\(3\)svs
version/cisco ios/15.1\(3\)svt1
version/cisco ios/15.2\(1\)ey
version/cisco ios/15.2\(2\)e
version/cisco ios/15.2\(2\)e1
version/cisco ios/15.2\(2\)e2
version/cisco ios/15.2\(2\)e3
version/cisco ios/15.2\(2\)e4
version/cisco ios/15.2\(2\)e5
version/cisco ios/15.2\(2\)e5a
version/cisco ios/15.2\(2\)e5b
version/cisco ios/15.2\(2\)e6
version/cisco ios/15.2\(2\)e7
version/cisco ios/15.2\(2\)e7b
version/cisco ios/15.2\(2\)e8
version/cisco ios/15.2\(2\)e9
version/cisco ios/15.2\(2\)e10
version/cisco ios/15.2\(2\)ea
version/cisco ios/15.2\(2\)ea1
version/cisco ios/15.2\(2\)ea2
version/cisco ios/15.2\(2\)ea3
version/cisco ios/15.2\(2\)eb
version/cisco ios/15.2\(2\)eb1
version/cisco ios/15.2\(2\)eb2
version/cisco ios/15.2\(2a\)e2
version/cisco ios/15.2\(2b\)e
version/cisco ios/15.2\(3\)e1
version/cisco ios/15.2\(3\)e2
version/cisco ios/15.2\(3\)e3
version/cisco ios/15.2\(3\)e4
version/cisco ios/15.2\(3\)e5
version/cisco ios/15.2\(3\)ea
version/cisco ios/15.2\(4\)e5a
version/cisco ios/15.2\(4\)ea
version/cisco ios/15.2\(4\)ea1
version/cisco ios/15.2\(4\)ea2
version/cisco ios/15.2\(4\)ea3
version/cisco ios/15.2\(4\)ea4
version/cisco ios/15.2\(4\)ea5
version/cisco ios/15.2\(4\)ea6
version/cisco ios/15.2\(4\)ea7
version/cisco ios/15.2\(4\)ea8
version/cisco ios/15.2\(4\)ea9
version/cisco ios/15.2\(4\)ea9a
version/cisco ios/15.2\(4\)ea10
version/cisco ios/15.2\(4\)ec1
version/cisco ios/15.2\(4\)ec2
version/cisco ios/15.2\(4\)jaz
version/cisco ios/15.2\(5\)e
version/cisco ios/15.2\(5\)e1
version/cisco ios/15.2\(5\)e2
version/cisco ios/15.2\(5\)e2b
version/cisco ios/15.2\(5\)e2c
version/cisco ios/15.2\(5\)ea
version/cisco ios/15.2\(5a\)e1
version/cisco ios/15.2\(6\)e
version/cisco ios/15.2\(6\)e0a
version/cisco ios/15.2\(6\)e0c
version/cisco ios/15.2\(6\)e1
version/cisco ios/15.2\(6\)e1a
version/cisco ios/15.2\(6\)e1s
version/cisco ios/15.2\(7\)e0b
version/cisco ios/15.2\(7a\)e0b
version/cisco ios/15.2\(7b\)e0b
version/cisco ios/15.3\(3\)ja1
version/cisco ios/15.3\(3\)ja4
version/cisco ios/15.3\(3\)ja5
version/cisco ios/15.3\(3\)ja6
version/cisco ios/15.3\(3\)ja7
version/cisco ios/15.3\(3\)ja8
version/cisco ios/15.3\(3\)ja10
version/cisco ios/15.3\(3\)ja11
version/cisco ios/15.3\(3\)ja12
version/cisco ios/15.3\(3\)jaa
version/cisco ios/15.3\(3\)jax
version/cisco ios/15.3\(3\)jax1
version/cisco ios/15.3\(3\)jax2
version/cisco ios/15.3\(3\)jb
version/cisco ios/15.3\(3\)jbb
version/cisco ios/15.3\(3\)jbb1
version/cisco ios/15.3\(3\)jbb2
version/cisco ios/15.3\(3\)jbb4
version/cisco ios/15.3\(3\)jbb5
version/cisco ios/15.3\(3\)jbb6
version/cisco ios/15.3\(3\)jbb6a
version/cisco ios/15.3\(3\)jbb8
version/cisco ios/15.3\(3\)jc
version/cisco ios/15.3\(3\)jc1
version/cisco ios/15.3\(3\)jc2
version/cisco ios/15.3\(3\)jc3
version/cisco ios/15.3\(3\)jc4
version/cisco ios/15.3\(3\)jc5
version/cisco ios/15.3\(3\)jc6
version/cisco ios/15.3\(3\)jc8
version/cisco ios/15.3\(3\)jc9
version/cisco ios/15.3\(3\)jc14
version/cisco ios/15.3\(3\)jd
version/cisco ios/15.3\(3\)jd2
version/cisco ios/15.3\(3\)jd3
version/cisco ios/15.3\(3\)jd4
version/cisco ios/15.3\(3\)jd5
version/cisco ios/15.3\(3\)jd6
version/cisco ios/15.3\(3\)jd7
version/cisco ios/15.3\(3\)jd8
version/cisco ios/15.3\(3\)jd9
version/cisco ios/15.3\(3\)jd11
version/cisco ios/15.3\(3\)jd12
version/cisco ios/15.3\(3\)jd13
version/cisco ios/15.3\(3\)jd14
version/cisco ios/15.3\(3\)jd16
version/cisco ios/15.3\(3\)jd17
version/cisco ios/15.3\(3\)je
version/cisco ios/15.3\(3\)jf
version/cisco ios/15.3\(3\)jf1
version/cisco ios/15.3\(3\)jf2
version/cisco ios/15.3\(3\)jf4
version/cisco ios/15.3\(3\)jf5
version/cisco ios/15.3\(3\)jf6
version/cisco ios/15.3\(3\)jf7
version/cisco ios/15.3\(3\)jf8
version/cisco ios/15.3\(3\)jf9
version/cisco ios/15.3\(3\)jf10
version/cisco ios/15.3\(3\)jf11
version/cisco ios/15.3\(3\)jf12
version/cisco ios/15.3\(3\)jf12i
version/cisco ios/15.3\(3\)jf13
version/cisco ios/15.3\(3\)jg
version/cisco ios/15.3\(3\)jg1
version/cisco ios/15.3\(3\)jh
version/cisco ios/15.3\(3\)jh1
version/cisco ios/15.3\(3\)ji1
version/cisco ios/15.3\(3\)ji3
version/cisco ios/15.3\(3\)ji4
version/cisco ios/15.3\(3\)ji5
version/cisco ios/15.3\(3\)ji6
version/cisco ios/15.3\(3\)jj
version/cisco ios/15.3\(3\)jj1
version/cisco ios/15.3\(3\)jk
version/cisco ios/15.3\(3\)jk1
version/cisco ios/15.3\(3\)jk1t
version/cisco ios/15.3\(3\)jk2
version/cisco ios/15.3\(3\)jk2a
version/cisco ios/15.3\(3\)jk3
version/cisco ios/15.3\(3\)jk4
version/cisco ios/15.3\(3\)jn
version/cisco ios/15.3\(3\)jn3
version/cisco ios/15.3\(3\)jn4
version/cisco ios/15.3\(3\)jn6
version/cisco ios/15.3\(3\)jn7
version/cisco ios/15.3\(3\)jn8
version/cisco ios/15.3\(3\)jn9
version/cisco ios/15.3\(3\)jn11
version/cisco ios/15.3\(3\)jn13
version/cisco ios/15.3\(3\)jn14
version/cisco ios/15.3\(3\)jn15
version/cisco ios/15.3\(3\)jnb
version/cisco ios/15.3\(3\)jnb1
version/cisco ios/15.3\(3\)jnb2
version/cisco ios/15.3\(3\)jnb3
version/cisco ios/15.3\(3\)jnb4
version/cisco ios/15.3\(3\)jnb5
version/cisco ios/15.3\(3\)jnb6
version/cisco ios/15.3\(3\)jnc
version/cisco ios/15.3\(3\)jnc1
version/cisco ios/15.3\(3\)jnc2
version/cisco ios/15.3\(3\)jnc3
version/cisco ios/15.3\(3\)jnc4
version/cisco ios/15.3\(3\)jnd
version/cisco ios/15.3\(3\)jnd1
version/cisco ios/15.3\(3\)jnd2
version/cisco ios/15.3\(3\)jnd3
version/cisco ios/15.3\(3\)jnp
version/cisco ios/15.3\(3\)jnp1
version/cisco ios/15.3\(3\)jnp3
version/cisco ios/15.3\(3\)jpb
version/cisco ios/15.3\(3\)jpb1
version/cisco ios/15.3\(3\)jpc
version/cisco ios/15.3\(3\)jpc1
version/cisco ios/15.3\(3\)jpc2
version/cisco ios/15.3\(3\)jpc3
version/cisco ios/15.3\(3\)jpc5
version/cisco ios/15.3\(3\)jpd
canonical/cisco ios xe
version/cisco ios xe/3.3.0xo
version/cisco ios xe/3.3.1xo
version/cisco ios xe/3.3.2xo
version/cisco ios xe/3.6.5be
version/cisco ios xe/3.7.4e
version/cisco ios xe/3.7.5e
version/cisco ios xe/16.9.1
version/cisco ios xe/16.9.1d
version/cisco ios xe/16.10.1
version/cisco ios xe/16.10.1e
version/cisco ios xe/16.11.1
version/cisco ios xe/16.11.1a
version/cisco ios xe/16.11.1c
version/cisco ios xe/16.11.1s
version/cisco ios xe/16.11.2
version/cisco ios xe/16.12.1
version/cisco ios xe/16.12.1c
version/cisco ios xe/16.12.1s
version/cisco ios xe/16.12.2
version/cisco ios xe/16.12.2s
version/cisco ios xe/16.12.2t
version/cisco ios xe/16.12.3
version/cisco ios xe/16.12.3s
version/cisco ios xe/16.12.4
version/cisco ios xe/17.1.1
version/cisco ios xe/17.1.1s
version/cisco ios xe/17.1.1t
version/cisco ios xe/17.1.2
version/cisco ios xe/17.2.1

CVE-2021-1392: Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact