CVE-2021-1434
24.03.2021, 20:15
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of any arbitrary file that resides on the underlying host file system.Enginsight
Vendor | Product | Version |
---|---|---|
cisco | ios_xe | 16.11.1 |
cisco | ios_xe | 16.11.1a:a |
cisco | ios_xe | 16.11.1b:b |
cisco | ios_xe | 16.11.1c:c |
cisco | ios_xe | 16.11.1s:s |
cisco | ios_xe | 16.11.2 |
cisco | ios_xe | 16.12.1 |
cisco | ios_xe | 16.12.1a:a |
cisco | ios_xe | 16.12.1c:c |
cisco | ios_xe | 16.12.1s:s |
cisco | ios_xe | 16.12.1t:t |
cisco | ios_xe | 16.12.1w:w |
cisco | ios_xe | 16.12.1x:x |
cisco | ios_xe | 16.12.1y:y |
cisco | ios_xe | 16.12.1z:z |
cisco | ios_xe | 16.12.1za:za |
cisco | ios_xe | 16.12.2 |
cisco | ios_xe | 16.12.2a:a |
cisco | ios_xe | 16.12.2s:s |
cisco | ios_xe | 16.12.2t:t |
cisco | ios_xe | 16.12.3 |
cisco | ios_xe | 16.12.3a:a |
cisco | ios_xe | 16.12.3s:s |
cisco | ios_xe | 17.2.1 |
cisco | ios_xe | 17.2.1a:a |
cisco | ios_xe | 17.2.1r:r |
cisco | ios_xe | 17.2.1v:v |
𝑥
= Vulnerable software versions
Common Weakness Enumeration