CVE-2021-1392: Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability
Published Mar 24, 2021
·Updated
A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device.
Affected Software
214 affected components
cisco IOS=15.0\(1\)ey
cisco IOS=15.0\(1\)ey1
cisco IOS=15.0\(1\)ey2
cisco IOS=15.1\(3\)svs
cisco IOS=15.1\(3\)svt1
cisco IOS=15.2\(1\)ey
cisco IOS=15.2\(2\)e
cisco IOS=15.2\(2\)e1
cisco IOS=15.2\(2\)e2
cisco IOS=15.2\(2\)e3
cisco IOS=15.2\(2\)e4
cisco IOS=15.2\(2\)e5
cisco IOS=15.2\(2\)e5a
cisco IOS=15.2\(2\)e5b
cisco IOS=15.2\(2\)e6
cisco IOS=15.2\(2\)e7
cisco IOS=15.2\(2\)e7b
cisco IOS=15.2\(2\)e8
cisco IOS=15.2\(2\)e9
cisco IOS=15.2\(2\)e10
cisco IOS=15.2\(2\)ea
cisco IOS=15.2\(2\)ea1
cisco IOS=15.2\(2\)ea2
cisco IOS=15.2\(2\)ea3
cisco IOS=15.2\(2\)eb
cisco IOS=15.2\(2\)eb1
cisco IOS=15.2\(2\)eb2
cisco IOS=15.2\(2a\)e2
cisco IOS=15.2\(2b\)e
cisco IOS=15.2\(3\)e1
cisco IOS=15.2\(3\)e2
cisco IOS=15.2\(3\)e3
cisco IOS=15.2\(3\)e4
cisco IOS=15.2\(3\)e5
cisco IOS=15.2\(3\)ea
cisco IOS=15.2\(4\)e5a
cisco IOS=15.2\(4\)ea
cisco IOS=15.2\(4\)ea1
cisco IOS=15.2\(4\)ea2
cisco IOS=15.2\(4\)ea3
cisco IOS=15.2\(4\)ea4
cisco IOS=15.2\(4\)ea5
cisco IOS=15.2\(4\)ea6
cisco IOS=15.2\(4\)ea7
cisco IOS=15.2\(4\)ea8
cisco IOS=15.2\(4\)ea9
cisco IOS=15.2\(4\)ea9a
cisco IOS=15.2\(4\)ea10
cisco IOS=15.2\(4\)ec1
cisco IOS=15.2\(4\)ec2
cisco IOS=15.2\(4\)jaz
cisco IOS=15.2\(5\)e
cisco IOS=15.2\(5\)e1
cisco IOS=15.2\(5\)e2
cisco IOS=15.2\(5\)e2b
cisco IOS=15.2\(5\)e2c
cisco IOS=15.2\(5\)ea
cisco IOS=15.2\(5a\)e1
cisco IOS=15.2\(6\)e
cisco IOS=15.2\(6\)e0a
cisco IOS=15.2\(6\)e0c
cisco IOS=15.2\(6\)e1
cisco IOS=15.2\(6\)e1a
cisco IOS=15.2\(6\)e1s
cisco IOS=15.2\(7\)e0b
cisco IOS=15.2\(7a\)e0b
cisco IOS=15.2\(7b\)e0b
cisco IOS=15.3\(3\)ja1
cisco IOS=15.3\(3\)ja4
cisco IOS=15.3\(3\)ja5
cisco IOS=15.3\(3\)ja6
cisco IOS=15.3\(3\)ja7
cisco IOS=15.3\(3\)ja8
cisco IOS=15.3\(3\)ja10
cisco IOS=15.3\(3\)ja11
cisco IOS=15.3\(3\)ja12
cisco IOS=15.3\(3\)jaa
cisco IOS=15.3\(3\)jax
cisco IOS=15.3\(3\)jax1
cisco IOS=15.3\(3\)jax2
cisco IOS=15.3\(3\)jb
cisco IOS=15.3\(3\)jbb
cisco IOS=15.3\(3\)jbb1
cisco IOS=15.3\(3\)jbb2
cisco IOS=15.3\(3\)jbb4
cisco IOS=15.3\(3\)jbb5
cisco IOS=15.3\(3\)jbb6
cisco IOS=15.3\(3\)jbb6a
cisco IOS=15.3\(3\)jbb8
cisco IOS=15.3\(3\)jc
cisco IOS=15.3\(3\)jc1
cisco IOS=15.3\(3\)jc2
cisco IOS=15.3\(3\)jc3
cisco IOS=15.3\(3\)jc4
cisco IOS=15.3\(3\)jc5
cisco IOS=15.3\(3\)jc6
cisco IOS=15.3\(3\)jc8
cisco IOS=15.3\(3\)jc9
cisco IOS=15.3\(3\)jc14
cisco IOS=15.3\(3\)jd
cisco IOS=15.3\(3\)jd2
cisco IOS=15.3\(3\)jd3
cisco IOS=15.3\(3\)jd4
cisco IOS=15.3\(3\)jd5
cisco IOS=15.3\(3\)jd6
cisco IOS=15.3\(3\)jd7
cisco IOS=15.3\(3\)jd8
cisco IOS=15.3\(3\)jd9
cisco IOS=15.3\(3\)jd11
cisco IOS=15.3\(3\)jd12
cisco IOS=15.3\(3\)jd13
cisco IOS=15.3\(3\)jd14
cisco IOS=15.3\(3\)jd16
cisco IOS=15.3\(3\)jd17
cisco IOS=15.3\(3\)je
cisco IOS=15.3\(3\)jf
cisco IOS=15.3\(3\)jf1
cisco IOS=15.3\(3\)jf2
cisco IOS=15.3\(3\)jf4
cisco IOS=15.3\(3\)jf5
cisco IOS=15.3\(3\)jf6
cisco IOS=15.3\(3\)jf7
cisco IOS=15.3\(3\)jf8
cisco IOS=15.3\(3\)jf9
cisco IOS=15.3\(3\)jf10
cisco IOS=15.3\(3\)jf11
cisco IOS=15.3\(3\)jf12
cisco IOS=15.3\(3\)jf12i
cisco IOS=15.3\(3\)jf13
cisco IOS=15.3\(3\)jg
cisco IOS=15.3\(3\)jg1
cisco IOS=15.3\(3\)jh
cisco IOS=15.3\(3\)jh1
cisco IOS=15.3\(3\)ji1
cisco IOS=15.3\(3\)ji3
cisco IOS=15.3\(3\)ji4
cisco IOS=15.3\(3\)ji5
cisco IOS=15.3\(3\)ji6
cisco IOS=15.3\(3\)jj
cisco IOS=15.3\(3\)jj1
cisco IOS=15.3\(3\)jk
cisco IOS=15.3\(3\)jk1
cisco IOS=15.3\(3\)jk1t
cisco IOS=15.3\(3\)jk2
cisco IOS=15.3\(3\)jk2a
cisco IOS=15.3\(3\)jk3
cisco IOS=15.3\(3\)jk4
cisco IOS=15.3\(3\)jn
cisco IOS=15.3\(3\)jn3
cisco IOS=15.3\(3\)jn4
cisco IOS=15.3\(3\)jn6
cisco IOS=15.3\(3\)jn7
cisco IOS=15.3\(3\)jn8
cisco IOS=15.3\(3\)jn9
cisco IOS=15.3\(3\)jn11
cisco IOS=15.3\(3\)jn13
cisco IOS=15.3\(3\)jn14
cisco IOS=15.3\(3\)jn15
cisco IOS=15.3\(3\)jnb
cisco IOS=15.3\(3\)jnb1
cisco IOS=15.3\(3\)jnb2
cisco IOS=15.3\(3\)jnb3
cisco IOS=15.3\(3\)jnb4
cisco IOS=15.3\(3\)jnb5
cisco IOS=15.3\(3\)jnb6
cisco IOS=15.3\(3\)jnc
cisco IOS=15.3\(3\)jnc1
cisco IOS=15.3\(3\)jnc2
cisco IOS=15.3\(3\)jnc3
cisco IOS=15.3\(3\)jnc4
cisco IOS=15.3\(3\)jnd
cisco IOS=15.3\(3\)jnd1
cisco IOS=15.3\(3\)jnd2
cisco IOS=15.3\(3\)jnd3
cisco IOS=15.3\(3\)jnp
cisco IOS=15.3\(3\)jnp1
cisco IOS=15.3\(3\)jnp3
cisco IOS=15.3\(3\)jpb
cisco IOS=15.3\(3\)jpb1
cisco IOS=15.3\(3\)jpc
cisco IOS=15.3\(3\)jpc1
cisco IOS=15.3\(3\)jpc2
cisco IOS=15.3\(3\)jpc3
cisco IOS=15.3\(3\)jpc5
cisco IOS=15.3\(3\)jpd
Cisco IOS XE=3.3.0xo
Cisco IOS XE=3.3.1xo
Cisco IOS XE=3.3.2xo
Cisco IOS XE=3.6.5be
Cisco IOS XE=3.7.4e
Cisco IOS XE=3.7.5e
Cisco IOS XE=16.9.1
Cisco IOS XE=16.9.1d
Cisco IOS XE=16.10.1
Cisco IOS XE=16.10.1e
Cisco IOS XE=16.11.1
Cisco IOS XE=16.11.1a
Cisco IOS XE=16.11.1c
Cisco IOS XE=16.11.1s
Cisco IOS XE=16.11.2
Cisco IOS XE=16.12.1
Cisco IOS XE=16.12.1c
Cisco IOS XE=16.12.1s
Cisco IOS XE=16.12.2
Cisco IOS XE=16.12.2s
Cisco IOS XE=16.12.2t
Cisco IOS XE=16.12.3
Cisco IOS XE=16.12.3s
Cisco IOS XE=16.12.4
Cisco IOS XE=17.1.1
Cisco IOS XE=17.1.1s
Cisco IOS XE=17.1.1t
Cisco IOS XE=17.1.2
Cisco IOS XE=17.2.1
Event History
Mar 24, 2021
CVE Published
via MITRE·08:07 PM
Data Sourced
via MITRE·08:07 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-1392?
CVE-2021-1392 is rated as high severity due to the potential for unauthorized access to sensitive credentials.
2
How can I mitigate CVE-2021-1392?
To mitigate CVE-2021-1392, ensure that all affected Cisco IOS and IOS XE versions are updated to the latest security patches provided by Cisco.
3
Who is affected by CVE-2021-1392?
CVE-2021-1392 affects authenticated local users of Cisco IOS and Cisco IOS XE software versions listed in the CVE description.
4
What type of vulnerability is CVE-2021-1392?
CVE-2021-1392 is a command injection vulnerability that allows local authenticated users to access sensitive information.
5
Can CVE-2021-1392 be exploited remotely?
No, CVE-2021-1392 requires local authenticated access to exploit the vulnerability.