CVE-2021-1381
24.03.2021, 21:15
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could exploit this vulnerability by running commands on the hardware platform to open a debugging console. A successful exploit could allow the attacker to access a debugging console.Enginsight
Vendor | Product | Version |
---|---|---|
cisco | ios_xe | 16.11.1 |
cisco | ios_xe | 16.11.1a:a |
cisco | ios_xe | 16.11.1b:b |
cisco | ios_xe | 16.11.1c:c |
cisco | ios_xe | 16.11.1s:s |
cisco | ios_xe | 16.11.2 |
cisco | ios_xe | 16.12.1 |
cisco | ios_xe | 16.12.1a:a |
cisco | ios_xe | 16.12.1c:c |
cisco | ios_xe | 16.12.1s:s |
cisco | ios_xe | 16.12.1t:t |
cisco | ios_xe | 16.12.1w:w |
cisco | ios_xe | 16.12.1x:x |
cisco | ios_xe | 16.12.1y:y |
cisco | ios_xe | 16.12.1z:z |
cisco | ios_xe | 16.12.1za:za |
cisco | ios_xe | 16.12.2 |
cisco | ios_xe | 16.12.2a:a |
cisco | ios_xe | 16.12.2s:s |
cisco | ios_xe | 16.12.2t:t |
cisco | ios_xe | 16.12.3 |
cisco | ios_xe | 16.12.3a:a |
cisco | ios_xe | 16.12.3s:s |
cisco | ios_xe | 16.12.4 |
cisco | ios_xe | 16.12.4a:a |
cisco | ios_xe | 17.1.1 |
cisco | ios_xe | 17.1.1a:a |
cisco | ios_xe | 17.1.1s:s |
cisco | ios_xe | 17.1.1t:t |
cisco | ios_xe | 17.1.2 |
cisco | ios_xe | 17.2.1 |
cisco | ios_xe | 17.2.1a:a |
cisco | ios_xe | 17.2.1r:r |
cisco | ios_xe | 17.2.1v:v |
cisco | ios_xe | 17.2.2 |
cisco | ios_xe | 17.2.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration