cisco-sa-xesdwpinj-V4weeqzU: Cisco IOS XE SD-WAN Software Parameter Injection Vulnerabilities
First published: Wed Mar 24 2021(Updated: )
Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU
Credit: Orange Group for reporting the vulnerability that is described in CVE-2021-1383. The vulnerability that is described in CVE-2021-1454 was found by Cisco during internal security testing.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Standalone IOS XE SD-WAN Releases |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-xesdwpinj-V4weeqzU?
The severity of cisco-sa-xesdwpinj-V4weeqzU is classified as high due to the potential for local authenticated attackers to gain root access.
How do I fix cisco-sa-xesdwpinj-V4weeqzU?
To fix cisco-sa-xesdwpinj-V4weeqzU, update to the latest patched version of Cisco IOS XE SD-WAN Software.
Who is affected by cisco-sa-xesdwpinj-V4weeqzU?
Cisco IOS XE SD-WAN Software users are affected by the vulnerabilities outlined in cisco-sa-xesdwpinj-V4weeqzU.
What type of attacks can exploit cisco-sa-xesdwpinj-V4weeqzU?
Authenticated local attacks that exploit insufficient input validation of CLI commands can leverage cisco-sa-xesdwpinj-V4weeqzU.
What should I do if I cannot patch cisco-sa-xesdwpinj-V4weeqzU immediately?
If immediate patching for cisco-sa-xesdwpinj-V4weeqzU is not possible, consider restricting local access to affected devices until a fix can be applied.
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/severity
- agent/references
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco standalone ios xe sd-wan releases