cisco-sa-ioxesdwan-clicmdinj-7bYX5k3: Cisco IOS XE SD-WAN Software Command Injection Vulnerability
First published: Wed Sep 22 2021(Updated: )
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input in the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system. An attacker would need valid user credentials to exploit this vulnerability. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxesdwan-clicmdinj-7bYX5k3 This advisory is part of the September 2021 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2021 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: by Paul Giblock the Cisco Advanced Security Initiatives Group
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases | ||
| Cisco IOS and IOS XE Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ioxesdwan-clicmdinj-7bYX5k3?
The severity of cisco-sa-ioxesdwan-clicmdinj-7bYX5k3 is considered high due to the potential for arbitrary command execution with elevated privileges.
How do I fix cisco-sa-ioxesdwan-clicmdinj-7bYX5k3?
To fix cisco-sa-ioxesdwan-clicmdinj-7bYX5k3, apply the available patches or updates provided by Cisco for affected IOS XE SD-WAN Software and IOS XE Software.
What systems are affected by cisco-sa-ioxesdwan-clicmdinj-7bYX5k3?
Cisco IOS XE SD-WAN Software and Cisco IOS XE Software are affected by cisco-sa-ioxesdwan-clicmdinj-7bYX5k3.
What type of attack can exploit cisco-sa-ioxesdwan-clicmdinj-7bYX5k3?
An authenticated local attacker can exploit cisco-sa-ioxesdwan-clicmdinj-7bYX5k3 to execute arbitrary commands with elevated privileges.
Is authentication required to exploit cisco-sa-ioxesdwan-clicmdinj-7bYX5k3?
Yes, authentication is required to exploit the cisco-sa-ioxesdwan-clicmdinj-7bYX5k3 vulnerability.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/author
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases
- canonical/cisco ios and ios xe software