What is the severity of CVE-2021-1442?

CVE-2021-1442 has a high severity rating due to its potential for privilege escalation on affected Cisco IOS XE devices.

How do I fix CVE-2021-1442?

To mitigate CVE-2021-1442, update your Cisco IOS XE software to a version that addresses this vulnerability.

Which Cisco IOS XE versions are affected by CVE-2021-1442?

CVE-2021-1442 affects multiple versions including 3.6.3e through 3.17.4s and various versions up to 17.2.1v.

Can CVE-2021-1442 be exploited remotely?

CVE-2021-1442 requires local authentication, meaning only authenticated users with local access can exploit this vulnerability.

What type of devices are impacted by CVE-2021-1442?

CVE-2021-1442 impacts Cisco devices running IOS XE software, notably in environments that leverage the Plug-and-Play subsystem.

Vulnerability/
CVE-2021-1442

high

7.8

CWE

532

24/3/2021

8/11/2024

CVE-2021-1442: Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability

First published: Wed Mar 24 2021(Updated: )

A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insufficient protection of sensitive information. An attacker with low privileges could exploit this vulnerability by issuing the diagnostic CLI show pnp profile when a specific PnP listener is enabled on the device. A successful exploit could allow the attacker to obtain a privileged authentication token. This token can be used to send crafted PnP messages and execute privileged commands on the targeted system.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE Software	=3.6.3e
Cisco IOS XE Software	=3.6.4e
Cisco IOS XE Software	=3.6.5ae
Cisco IOS XE Software	=3.6.5be
Cisco IOS XE Software	=3.6.5e
Cisco IOS XE Software	=3.6.6e
Cisco IOS XE Software	=3.6.7ae
Cisco IOS XE Software	=3.6.7be
Cisco IOS XE Software	=3.6.7e
Cisco IOS XE Software	=3.6.8e
Cisco IOS XE Software	=3.6.9ae
Cisco IOS XE Software	=3.6.9e
Cisco IOS XE Software	=3.6.10e
Cisco IOS XE Software	=3.7.3e
Cisco IOS XE Software	=3.7.4e
Cisco IOS XE Software	=3.7.5e
Cisco IOS XE Software	=3.8.0e
Cisco IOS XE Software	=3.8.1e
Cisco IOS XE Software	=3.8.2e
Cisco IOS XE Software	=3.8.3e
Cisco IOS XE Software	=3.8.4e
Cisco IOS XE Software	=3.8.5ae
Cisco IOS XE Software	=3.8.5e
Cisco IOS XE Software	=3.8.6e
Cisco IOS XE Software	=3.8.7e
Cisco IOS XE Software	=3.8.8e
Cisco IOS XE Software	=3.8.9e
Cisco IOS XE Software	=3.8.10e
Cisco IOS XE Software	=3.9.0e
Cisco IOS XE Software	=3.9.1e
Cisco IOS XE Software	=3.9.2be
Cisco IOS XE Software	=3.9.2e
Cisco IOS XE Software	=3.10.0ce
Cisco IOS XE Software	=3.10.0e
Cisco IOS XE Software	=3.10.1ae
Cisco IOS XE Software	=3.10.1e
Cisco IOS XE Software	=3.10.1se
Cisco IOS XE Software	=3.10.2e
Cisco IOS XE Software	=3.10.3e
Cisco IOS XE Software	=3.11.0e
Cisco IOS XE Software	=3.11.1ae
Cisco IOS XE Software	=3.11.1e
Cisco IOS XE Software	=3.11.2ae
Cisco IOS XE Software	=3.11.2e
Cisco IOS XE Software	=3.13.8s
Cisco IOS XE Software	=3.13.9s
Cisco IOS XE Software	=3.13.10s
Cisco IOS XE Software	=3.16.0as
Cisco IOS XE Software	=3.16.0bs
Cisco IOS XE Software	=3.16.0cs
Cisco IOS XE Software	=3.16.0s
Cisco IOS XE Software	=3.16.1as
Cisco IOS XE Software	=3.16.1s
Cisco IOS XE Software	=3.16.2as
Cisco IOS XE Software	=3.16.2bs
Cisco IOS XE Software	=3.16.2s
Cisco IOS XE Software	=3.16.3as
Cisco IOS XE Software	=3.16.3s
Cisco IOS XE Software	=3.16.4as
Cisco IOS XE Software	=3.16.4bs
Cisco IOS XE Software	=3.16.4cs
Cisco IOS XE Software	=3.16.4ds
Cisco IOS XE Software	=3.16.4es
Cisco IOS XE Software	=3.16.4gs
Cisco IOS XE Software	=3.16.4s
Cisco IOS XE Software	=3.16.5as
Cisco IOS XE Software	=3.16.5bs
Cisco IOS XE Software	=3.16.5s
Cisco IOS XE Software	=3.16.6bs
Cisco IOS XE Software	=3.16.6s
Cisco IOS XE Software	=3.16.7as
Cisco IOS XE Software	=3.16.7bs
Cisco IOS XE Software	=3.16.7s
Cisco IOS XE Software	=3.16.8s
Cisco IOS XE Software	=3.16.9s
Cisco IOS XE Software	=3.16.10as
Cisco IOS XE Software	=3.16.10s
Cisco IOS XE Software	=3.17.0s
Cisco IOS XE Software	=3.17.1as
Cisco IOS XE Software	=3.17.1s
Cisco IOS XE Software	=3.17.2s
Cisco IOS XE Software	=3.17.3s
Cisco IOS XE Software	=3.17.4s
Cisco IOS XE Software	=3.18.0as
Cisco IOS XE Software	=3.18.0s
Cisco IOS XE Software	=3.18.0sp
Cisco IOS XE Software	=3.18.1asp
Cisco IOS XE Software	=3.18.1bsp
Cisco IOS XE Software	=3.18.1csp
Cisco IOS XE Software	=3.18.1gsp
Cisco IOS XE Software	=3.18.1hsp
Cisco IOS XE Software	=3.18.1isp
Cisco IOS XE Software	=3.18.1s
Cisco IOS XE Software	=3.18.1sp
Cisco IOS XE Software	=3.18.2asp
Cisco IOS XE Software	=3.18.2s
Cisco IOS XE Software	=3.18.2sp
Cisco IOS XE Software	=3.18.3asp
Cisco IOS XE Software	=3.18.3bsp
Cisco IOS XE Software	=3.18.3s
Cisco IOS XE Software	=3.18.3sp
Cisco IOS XE Software	=3.18.4s
Cisco IOS XE Software	=3.18.4sp
Cisco IOS XE Software	=3.18.5sp
Cisco IOS XE Software	=3.18.6sp
Cisco IOS XE Software	=3.18.7sp
Cisco IOS XE Software	=3.18.8asp
Cisco IOS XE Software	=3.18.8sp
Cisco IOS XE Software	=16.1.1
Cisco IOS XE Software	=16.1.2
Cisco IOS XE Software	=16.1.3
Cisco IOS XE Software	=16.2.1
Cisco IOS XE Software	=16.2.2
Cisco IOS XE Software	=16.3.1
Cisco IOS XE Software	=16.3.1a
Cisco IOS XE Software	=16.3.2
Cisco IOS XE Software	=16.3.3
Cisco IOS XE Software	=16.3.4
Cisco IOS XE Software	=16.3.5
Cisco IOS XE Software	=16.3.5b
Cisco IOS XE Software	=16.3.6
Cisco IOS XE Software	=16.3.7
Cisco IOS XE Software	=16.3.8
Cisco IOS XE Software	=16.3.9
Cisco IOS XE Software	=16.3.10
Cisco IOS XE Software	=16.3.11
Cisco IOS XE Software	=16.4.1
Cisco IOS XE Software	=16.4.2
Cisco IOS XE Software	=16.4.3
Cisco IOS XE Software	=16.5.1
Cisco IOS XE Software	=16.5.1a
Cisco IOS XE Software	=16.5.1b
Cisco IOS XE Software	=16.5.2
Cisco IOS XE Software	=16.5.3
Cisco IOS XE Software	=16.6.1
Cisco IOS XE Software	=16.6.2
Cisco IOS XE Software	=16.6.3
Cisco IOS XE Software	=16.6.4
Cisco IOS XE Software	=16.6.4a
Cisco IOS XE Software	=16.6.4s
Cisco IOS XE Software	=16.6.5
Cisco IOS XE Software	=16.6.5a
Cisco IOS XE Software	=16.6.5b
Cisco IOS XE Software	=16.6.6
Cisco IOS XE Software	=16.6.7
Cisco IOS XE Software	=16.6.7a
Cisco IOS XE Software	=16.6.8
Cisco IOS XE Software	=16.7.1
Cisco IOS XE Software	=16.7.1a
Cisco IOS XE Software	=16.7.1b
Cisco IOS XE Software	=16.7.2
Cisco IOS XE Software	=16.7.3
Cisco IOS XE Software	=16.7.4
Cisco IOS XE Software	=16.8.1
Cisco IOS XE Software	=16.8.1a
Cisco IOS XE Software	=16.8.1b
Cisco IOS XE Software	=16.8.1c
Cisco IOS XE Software	=16.8.1d
Cisco IOS XE Software	=16.8.1e
Cisco IOS XE Software	=16.8.1s
Cisco IOS XE Software	=16.8.2
Cisco IOS XE Software	=16.8.3
Cisco IOS XE Software	=16.9.1
Cisco IOS XE Software	=16.9.1a
Cisco IOS XE Software	=16.9.1b
Cisco IOS XE Software	=16.9.1c
Cisco IOS XE Software	=16.9.1d
Cisco IOS XE Software	=16.9.1s
Cisco IOS XE Software	=16.9.2
Cisco IOS XE Software	=16.9.2a
Cisco IOS XE Software	=16.9.2s
Cisco IOS XE Software	=16.9.3
Cisco IOS XE Software	=16.9.3a
Cisco IOS XE Software	=16.9.3h
Cisco IOS XE Software	=16.9.3s
Cisco IOS XE Software	=16.9.4
Cisco IOS XE Software	=16.9.4c
Cisco IOS XE Software	=16.9.5
Cisco IOS XE Software	=16.9.5f
Cisco IOS XE Software	=16.9.6
Cisco IOS XE Software	=16.10.1
Cisco IOS XE Software	=16.10.1a
Cisco IOS XE Software	=16.10.1b
Cisco IOS XE Software	=16.10.1c
Cisco IOS XE Software	=16.10.1d
Cisco IOS XE Software	=16.10.1e
Cisco IOS XE Software	=16.10.1f
Cisco IOS XE Software	=16.10.1g
Cisco IOS XE Software	=16.10.1s
Cisco IOS XE Software	=16.10.2
Cisco IOS XE Software	=16.10.3
Cisco IOS XE Software	=16.11.1
Cisco IOS XE Software	=16.11.1a
Cisco IOS XE Software	=16.11.1b
Cisco IOS XE Software	=16.11.1c
Cisco IOS XE Software	=16.11.1s
Cisco IOS XE Software	=16.11.2
Cisco IOS XE Software	=16.12.1
Cisco IOS XE Software	=16.12.1a
Cisco IOS XE Software	=16.12.1c
Cisco IOS XE Software	=16.12.1s
Cisco IOS XE Software	=16.12.1t
Cisco IOS XE Software	=16.12.1w
Cisco IOS XE Software	=16.12.1x
Cisco IOS XE Software	=16.12.1y
Cisco IOS XE Software	=16.12.1z
Cisco IOS XE Software	=16.12.2
Cisco IOS XE Software	=16.12.2a
Cisco IOS XE Software	=16.12.2s
Cisco IOS XE Software	=16.12.2t
Cisco IOS XE Software	=16.12.3
Cisco IOS XE Software	=16.12.3a
Cisco IOS XE Software	=16.12.3s
Cisco IOS XE Software	=16.12.4
Cisco IOS XE Software	=16.12.4a
Cisco IOS XE Software	=17.1.1
Cisco IOS XE Software	=17.1.1a
Cisco IOS XE Software	=17.1.1s
Cisco IOS XE Software	=17.1.1t
Cisco IOS XE Software	=17.1.2
Cisco IOS XE Software	=17.2.1
Cisco IOS XE Software	=17.2.1a
Cisco IOS XE Software	=17.2.1r
Cisco IOS XE Software	=17.2.1v

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL

Frequently Asked Questions

What is the severity of CVE-2021-1442?
CVE-2021-1442 has a high severity rating due to its potential for privilege escalation on affected Cisco IOS XE devices.
How do I fix CVE-2021-1442?
To mitigate CVE-2021-1442, update your Cisco IOS XE software to a version that addresses this vulnerability.
Which Cisco IOS XE versions are affected by CVE-2021-1442?
CVE-2021-1442 affects multiple versions including 3.6.3e through 3.17.4s and various versions up to 17.2.1v.
Can CVE-2021-1442 be exploited remotely?
CVE-2021-1442 requires local authentication, meaning only authenticated users with local access can exploit this vulnerability.
What type of devices are impacted by CVE-2021-1442?
CVE-2021-1442 impacts Cisco devices running IOS XE software, notably in environments that leverage the Plug-and-Play subsystem.

agent/type
agent/references
agent/author
agent/severity
agent/weakness
agent/title
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/3.6.3e
version/cisco ios xe/3.6.4e
version/cisco ios xe/3.6.5ae
version/cisco ios xe/3.6.5be
version/cisco ios xe/3.6.5e
version/cisco ios xe/3.6.6e
version/cisco ios xe/3.6.7ae
version/cisco ios xe/3.6.7be
version/cisco ios xe/3.6.7e
version/cisco ios xe/3.6.8e
version/cisco ios xe/3.6.9ae
version/cisco ios xe/3.6.9e
version/cisco ios xe/3.6.10e
version/cisco ios xe/3.7.3e
version/cisco ios xe/3.7.4e
version/cisco ios xe/3.7.5e
version/cisco ios xe/3.8.0e
version/cisco ios xe/3.8.1e
version/cisco ios xe/3.8.2e
version/cisco ios xe/3.8.3e
version/cisco ios xe/3.8.4e
version/cisco ios xe/3.8.5ae
version/cisco ios xe/3.8.5e
version/cisco ios xe/3.8.6e
version/cisco ios xe/3.8.7e
version/cisco ios xe/3.8.8e
version/cisco ios xe/3.8.9e
version/cisco ios xe/3.8.10e
version/cisco ios xe/3.9.0e
version/cisco ios xe/3.9.1e
version/cisco ios xe/3.9.2be
version/cisco ios xe/3.9.2e
version/cisco ios xe/3.10.0ce
version/cisco ios xe/3.10.0e
version/cisco ios xe/3.10.1ae
version/cisco ios xe/3.10.1e
version/cisco ios xe/3.10.1se
version/cisco ios xe/3.10.2e
version/cisco ios xe/3.10.3e
version/cisco ios xe/3.11.0e
version/cisco ios xe/3.11.1ae
version/cisco ios xe/3.11.1e
version/cisco ios xe/3.11.2ae
version/cisco ios xe/3.11.2e
version/cisco ios xe/3.13.8s
version/cisco ios xe/3.13.9s
version/cisco ios xe/3.13.10s
version/cisco ios xe/3.16.0as
version/cisco ios xe/3.16.0bs
version/cisco ios xe/3.16.0cs
version/cisco ios xe/3.16.0s
version/cisco ios xe/3.16.1as
version/cisco ios xe/3.16.1s
version/cisco ios xe/3.16.2as
version/cisco ios xe/3.16.2bs
version/cisco ios xe/3.16.2s
version/cisco ios xe/3.16.3as
version/cisco ios xe/3.16.3s
version/cisco ios xe/3.16.4as
version/cisco ios xe/3.16.4bs
version/cisco ios xe/3.16.4cs
version/cisco ios xe/3.16.4ds
version/cisco ios xe/3.16.4es
version/cisco ios xe/3.16.4gs
version/cisco ios xe/3.16.4s
version/cisco ios xe/3.16.5as
version/cisco ios xe/3.16.5bs
version/cisco ios xe/3.16.5s
version/cisco ios xe/3.16.6bs
version/cisco ios xe/3.16.6s
version/cisco ios xe/3.16.7as
version/cisco ios xe/3.16.7bs
version/cisco ios xe/3.16.7s
version/cisco ios xe/3.16.8s
version/cisco ios xe/3.16.9s
version/cisco ios xe/3.16.10as
version/cisco ios xe/3.16.10s
version/cisco ios xe/3.17.0s
version/cisco ios xe/3.17.1as
version/cisco ios xe/3.17.1s
version/cisco ios xe/3.17.2s
version/cisco ios xe/3.17.3s
version/cisco ios xe/3.17.4s
version/cisco ios xe/3.18.0as
version/cisco ios xe/3.18.0s
version/cisco ios xe/3.18.0sp
version/cisco ios xe/3.18.1asp
version/cisco ios xe/3.18.1bsp
version/cisco ios xe/3.18.1csp
version/cisco ios xe/3.18.1gsp
version/cisco ios xe/3.18.1hsp
version/cisco ios xe/3.18.1isp
version/cisco ios xe/3.18.1s
version/cisco ios xe/3.18.1sp
version/cisco ios xe/3.18.2asp
version/cisco ios xe/3.18.2s
version/cisco ios xe/3.18.2sp
version/cisco ios xe/3.18.3asp
version/cisco ios xe/3.18.3bsp
version/cisco ios xe/3.18.3s
version/cisco ios xe/3.18.3sp
version/cisco ios xe/3.18.4s
version/cisco ios xe/3.18.4sp
version/cisco ios xe/3.18.5sp
version/cisco ios xe/3.18.6sp
version/cisco ios xe/3.18.7sp
version/cisco ios xe/3.18.8asp
version/cisco ios xe/3.18.8sp
version/cisco ios xe/16.1.1
version/cisco ios xe/16.1.2
version/cisco ios xe/16.1.3
version/cisco ios xe/16.2.1
version/cisco ios xe/16.2.2
version/cisco ios xe/16.3.1
version/cisco ios xe/16.3.1a
version/cisco ios xe/16.3.2
version/cisco ios xe/16.3.3
version/cisco ios xe/16.3.4
version/cisco ios xe/16.3.5
version/cisco ios xe/16.3.5b
version/cisco ios xe/16.3.6
version/cisco ios xe/16.3.7
version/cisco ios xe/16.3.8
version/cisco ios xe/16.3.9
version/cisco ios xe/16.3.10
version/cisco ios xe/16.3.11
version/cisco ios xe/16.4.1
version/cisco ios xe/16.4.2
version/cisco ios xe/16.4.3
version/cisco ios xe/16.5.1
version/cisco ios xe/16.5.1a
version/cisco ios xe/16.5.1b
version/cisco ios xe/16.5.2
version/cisco ios xe/16.5.3
version/cisco ios xe/16.6.1
version/cisco ios xe/16.6.2
version/cisco ios xe/16.6.3
version/cisco ios xe/16.6.4
version/cisco ios xe/16.6.4a
version/cisco ios xe/16.6.4s
version/cisco ios xe/16.6.5
version/cisco ios xe/16.6.5a
version/cisco ios xe/16.6.5b
version/cisco ios xe/16.6.6
version/cisco ios xe/16.6.7
version/cisco ios xe/16.6.7a
version/cisco ios xe/16.6.8
version/cisco ios xe/16.7.1
version/cisco ios xe/16.7.1a
version/cisco ios xe/16.7.1b
version/cisco ios xe/16.7.2
version/cisco ios xe/16.7.3
version/cisco ios xe/16.7.4
version/cisco ios xe/16.8.1
version/cisco ios xe/16.8.1a
version/cisco ios xe/16.8.1b
version/cisco ios xe/16.8.1c
version/cisco ios xe/16.8.1d
version/cisco ios xe/16.8.1e
version/cisco ios xe/16.8.1s
version/cisco ios xe/16.8.2
version/cisco ios xe/16.8.3
version/cisco ios xe/16.9.1
version/cisco ios xe/16.9.1a
version/cisco ios xe/16.9.1b
version/cisco ios xe/16.9.1c
version/cisco ios xe/16.9.1d
version/cisco ios xe/16.9.1s
version/cisco ios xe/16.9.2
version/cisco ios xe/16.9.2a
version/cisco ios xe/16.9.2s
version/cisco ios xe/16.9.3
version/cisco ios xe/16.9.3a
version/cisco ios xe/16.9.3h
version/cisco ios xe/16.9.3s
version/cisco ios xe/16.9.4
version/cisco ios xe/16.9.4c
version/cisco ios xe/16.9.5
version/cisco ios xe/16.9.5f
version/cisco ios xe/16.9.6
version/cisco ios xe/16.10.1
version/cisco ios xe/16.10.1a
version/cisco ios xe/16.10.1b
version/cisco ios xe/16.10.1c
version/cisco ios xe/16.10.1d
version/cisco ios xe/16.10.1e
version/cisco ios xe/16.10.1f
version/cisco ios xe/16.10.1g
version/cisco ios xe/16.10.1s
version/cisco ios xe/16.10.2
version/cisco ios xe/16.10.3
version/cisco ios xe/16.11.1
version/cisco ios xe/16.11.1a
version/cisco ios xe/16.11.1b
version/cisco ios xe/16.11.1c
version/cisco ios xe/16.11.1s
version/cisco ios xe/16.11.2
version/cisco ios xe/16.12.1
version/cisco ios xe/16.12.1a
version/cisco ios xe/16.12.1c
version/cisco ios xe/16.12.1s
version/cisco ios xe/16.12.1t
version/cisco ios xe/16.12.1w
version/cisco ios xe/16.12.1x
version/cisco ios xe/16.12.1y
version/cisco ios xe/16.12.1z
version/cisco ios xe/16.12.2
version/cisco ios xe/16.12.2a
version/cisco ios xe/16.12.2s
version/cisco ios xe/16.12.2t
version/cisco ios xe/16.12.3
version/cisco ios xe/16.12.3a
version/cisco ios xe/16.12.3s
version/cisco ios xe/16.12.4
version/cisco ios xe/16.12.4a
version/cisco ios xe/17.1.1
version/cisco ios xe/17.1.1a
version/cisco ios xe/17.1.1s
version/cisco ios xe/17.1.1t
version/cisco ios xe/17.1.2
version/cisco ios xe/17.2.1
version/cisco ios xe/17.2.1a
version/cisco ios xe/17.2.1r
version/cisco ios xe/17.2.1v