cisco-sa-sdwan-maapi-privesc-KSUg7QSS: Cisco IOS XE SD-WAN Software Command Injection Vulnerability
First published: Wed Sep 22 2021(Updated: )
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS This advisory is part of the September 2021 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2021 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: by James Spadaro the Cisco Advanced Security Initiatives Group
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sdwan-maapi-privesc-KSUg7QSS?
The severity of cisco-sa-sdwan-maapi-privesc-KSUg7QSS is high due to potential unauthorized access and privilege escalation.
How do I fix cisco-sa-sdwan-maapi-privesc-KSUg7QSS?
To fix cisco-sa-sdwan-maapi-privesc-KSUg7QSS, you should update to the latest version of Cisco IOS XE SD-WAN Software that addresses this vulnerability.
Who is affected by cisco-sa-sdwan-maapi-privesc-KSUg7QSS?
Organizations using Cisco IOS XE SD-WAN Software are affected by cisco-sa-sdwan-maapi-privesc-KSUg7QSS if they have not applied the necessary security updates.
What type of attacker can exploit cisco-sa-sdwan-maapi-privesc-KSUg7QSS?
An authenticated, local attacker can exploit cisco-sa-sdwan-maapi-privesc-KSUg7QSS to execute arbitrary commands with root-level privileges.
What are the potential consequences of not addressing cisco-sa-sdwan-maapi-privesc-KSUg7QSS?
Failure to address cisco-sa-sdwan-maapi-privesc-KSUg7QSS could result in unauthorized control and manipulation of system functions, leading to potential data breaches.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/author
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases