cisco-sa-xesdwcinj-t68PPW7m: Cisco IOS XE SD-WAN Software Command Injection Vulnerability
First published: Wed Mar 24 2021(Updated: )
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-t68PPW7m
Credit: Orange Group.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of Cisco-SA-XESDWCINJ-T68PPW7M?
The severity of Cisco-SA-XESDWCINJ-T68PPW7M is considered high due to the potential for remote command injection with root privileges.
How do I fix Cisco-SA-XESDWCINJ-T68PPW7M?
To fix Cisco-SA-XESDWCINJ-T68PPW7M, update the affected Cisco IOS XE SD-WAN Software to the latest patched version provided by Cisco.
Who is affected by Cisco-SA-XESDWCINJ-T68PPW7M?
Cisco-SA-XESDWCINJ-T68PPW7M affects users of the Cisco IOS XE SD-WAN Software who have local authenticated access.
What type of attack does Cisco-SA-XESDWCINJ-T68PPW7M enable?
Cisco-SA-XESDWCINJ-T68PPW7M enables an authenticated local attacker to execute arbitrary commands on the underlying operating system.
Is authentication required for exploiting Cisco-SA-XESDWCINJ-T68PPW7M?
Yes, authentication is required for exploiting Cisco-SA-XESDWCINJ-T68PPW7M, as the vulnerability affects only authenticated users.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases