cisco-sa-xesdwcinj-AcQ5MxCn: Cisco IOS XE SD-WAN Software Command Injection Vulnerability
First published: Wed Apr 29 2020(Updated: )
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI utility. The attacker must be authenticated to access the CLI utility. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-AcQ5MxCn
Credit: Julien Legras SynacktivThomas Etrillard Synacktiv
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases | >=16.9=16.10=16.11<=16.12<Cisco IOS XE 17.2.1r | Cisco IOS XE 17.2.1r |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco SA XESDWCINJ ACQ5MXCN?
The severity of Cisco SA XESDWCINJ ACQ5MXCN is classified as high due to the potential for root privilege command injection by authenticated attackers.
How do I fix Cisco SA XESDWCINJ ACQ5MXCN?
To fix Cisco SA XESDWCINJ ACQ5MXCN, upgrade your affected Cisco IOS XE SD-WAN Software to version 17.2.1r or later.
Who is affected by Cisco SA XESDWCINJ ACQ5MXCN?
Cisco SA XESDWCINJ ACQ5MXCN affects users running vulnerable versions of Cisco IOS XE SD-WAN Software from version 16.9 to just before version 17.2.1r.
What is the attack vector for Cisco SA XESDWCINJ ACQ5MXCN?
The attack vector for Cisco SA XESDWCINJ ACQ5MXCN is local, requiring authenticated access to the CLI for exploitation.
What are the potential consequences of Cisco SA XESDWCINJ ACQ5MXCN?
The potential consequences of Cisco SA XESDWCINJ ACQ5MXCN include unauthorized execution of arbitrary commands with root privileges.
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/title
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases
- version/cisco standalone ios xe sd-wan releases/16.9
- version/cisco standalone ios xe sd-wan releases/16.10
- version/cisco standalone ios xe sd-wan releases/16.11
- version/cisco standalone ios xe sd-wan releases/16.12