2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"product":"Cisco IOS XE Software","vendor":"Cisco","versions":[{"status":"affected","version":"n/a"}]}],"source":"psirt@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*","matchCriteriaId":"119A964D-ABC8-424D-8097-85B832A833BD","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*","matchCriteriaId":"F29CEE37-4044-4A3C-9685-C9C021FD346A","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*","matchCriteriaId":"E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*","matchCriteriaId":"E4BF9829-F80E-4837-A420-39B291C4E17B","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*","matchCriteriaId":"DB6BD18B-B9BD-452F-986E-16A6668E46B6","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*","matchCriteriaId":"D136D2BC-FFB5-4912-A3B1-BD96148CB9A5","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*","matchCriteriaId":"A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*","matchCriteriaId":"5CD5B3AB-27C2-4055-A3B7-0112D089FDA4","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*","matchCriteriaId":"04081A51-E08F-4114-9276-584E836181D3","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*","matchCriteriaId":"ADED0D82-2A4D-4235-BFAC-5EE2D862B652","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*","matchCriteriaId":"62A46516-CEB7-48D4-879B-341963A1FA31","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*","matchCriteriaId":"D6EF98FA-6DF9-4935-9639-143E08462BC4","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*","matchCriteriaId":"763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*","matchCriteriaId":"0A443E93-6C4B-4F86-BA7C-7C2A929E795A","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*","matchCriteriaId":"6ECEDD9D-6517-44BA-A95F-D1D5488C0E41","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*","matchCriteriaId":"E91F8704-6DAD-474A-84EA-04E4AF7BB9B1","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*","matchCriteriaId":"314C7763-A64D-4023-9F3F-9A821AE4151F","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*","matchCriteriaId":"5820D71D-FC93-45AA-BC58-A26A1A39C936","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*","matchCriteriaId":"FC1C85DD-69CC-4AA8-B219-651D57FC3506","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*","matchCriteriaId":"DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*","matchCriteriaId":"B53E377A-0296-4D7A-B97C-576B0026543D","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*","matchCriteriaId":"C98DED36-D4B5-48D6-964E-EEEE97936700","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*","matchCriteriaId":"CD98C9E8-3EA6-4160-970D-37C389576516","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*","matchCriteriaId":"C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*","matchCriteriaId":"9027A528-2588-4C06-810B-5BB313FE4323","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*","matchCriteriaId":"7745ED34-D59D-49CC-B174-96BCA03B3374","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*","matchCriteriaId":"19AF4CF3-6E79-4EA3-974D-CD451A192BA9","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*","matchCriteriaId":"313BD54C-073C-4F27-82D5-C99EFC3A20F7","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*","matchCriteriaId":"93B96E01-3777-4C33-9225-577B469A6CE5","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*","matchCriteriaId":"65FC3CC1-CF4F-4A2D-A500-04395AFE8B47","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*","matchCriteriaId":"027200FC-8AD4-47E4-A404-490AE4F997EC","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*","matchCriteriaId":"E5019B59-508E-40B0-9C92-2C26F58E2FBE","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*","matchCriteriaId":"443D78BA-A3DA-4D1F-A4DF-2F426DC6B841","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*","matchCriteriaId":"1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*","matchCriteriaId":"3C6FB4DC-814D-49D2-BBE2-3861AE985A1C","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*","matchCriteriaId":"D5750264-2990-4942-85F4-DB9746C5CA2B","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*","matchCriteriaId":"02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*","matchCriteriaId":"B9173AD6-6658-4267-AAA7-D50D0B657528","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*","matchCriteriaId":"7F02EE9D-45B1-43D6-B05D-6FF19472216B","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*","matchCriteriaId":"1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E306B09C-CB48-4067-B60C-5F738555EEAC","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"CD446C51-E713-4E46-8328-0A0477D140D2","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*","matchCriteriaId":"4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*","matchCriteriaId":"4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*","matchCriteriaId":"89369318-2E83-489F-B872-5F2E247BBF8F","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*","matchCriteriaId":"8B4D4659-A304-459F-8AB3-ED6D84B44C0F","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"B51FA707-8DB1-4596-9122-D4BFEF17F400","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*","matchCriteriaId":"C04DF35A-1B6F-420A-8D84-74EB41BF3700","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*","matchCriteriaId":"211CC9B2-6108-4C50-AB31-DC527C43053E","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*","matchCriteriaId":"75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*","matchCriteriaId":"128F95D7-E49F-4B36-8F47-823C0298449E","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*","matchCriteriaId":"E21B3881-37E9-4C00-9336-12C9C28D1B61","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*","matchCriteriaId":"E54599DB-A85E-4EEA-9985-2CBF90E28A08","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*","matchCriteriaId":"2B270A04-9961-4E99-806B-441CD674AFBD","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"1360069D-0358-4746-8C3F-44C2A40988D7","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5A6B707B-4543-41F1-83DF-49A93BF56FB1","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"DC8F611B-D347-4A21-90E6-56CF4D8A35A3","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*","matchCriteriaId":"D9A92CE4-B4B0-4C14-AE11-8DFE511406F3","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerability by authenticating to the device as an administrative user and executing a sequence of commands. A successful exploit could allow the attacker to obtain access to the underlying operating system as the root user."},{"lang":"es","value":"Una vulnerabilidad en la administración de la CLI en el Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado acceder al sistema operativo subyacente como usuario root. Esta vulnerabilidad es debido a la forma en que el software maneja las sesiones CLI simultáneas. Un atacante podría explotar esta vulnerabilidad si se autentica en el dispositivo como usuario administrativo y ejecuta una secuencia de comandos. Una explotación con éxito podría permitir al atacante obtener acceso al sistema operativo subyacente como usuario root"}],"id":"CVE-2021-1281","lastModified":"2026-06-17T03:31:24.067","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":6.9,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.4,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N","version":"3.1"},"exploitabilityScore":0.8,"impactScore":4.2,"source":"psirt@cisco.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2021-1281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-11-08T20:47:17.326550Z","version":"2.0.3"}}]},"published":"2021-03-24T21:15:11.443","references":[{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-clipriv-9TO2QGVp"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-clipriv-9TO2QGVp"}],"sourceIdentifier":"psirt@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-399"}],"source":"psirt@cisco.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|