CVE-2021-34725 - Vulnerability Details

Vendors	Products
Cisco	1000 Integrated Services Router 1100-4g\/6g Integrated Services Router 1100-4p Integrated Services Router 1100-8p Integrated Services Router 1100 Integrated Services Router 1101-4p Integrated Services Router 1101 Integrated Services Router 1109-2p Integrated Services Router 1109-4p Integrated Services Router 1109 Integrated Services Router 1111x-8p Integrated Services Router 1111x Integrated Services Router 111x Integrated Services Router 1120 Integrated Services Router 1160 Integrated Services Router 4000 Integrated Services Router 4221 Integrated Services Router 422 Integrated Services Router 4321 Integrated Services Router 4331 Integrated Services Router 4351 Integrated Services Router 4431 Integrated Services Router 4451-x Integrated Services Router 4451 Integrated Services Router 4461 Integrated Services Router Asr 1000 Asr 1000-esp100 Asr 1000-x Asr 1000 Series Asr 1000 Series Route Processor \(rp2\) Asr 1000 Series Route Processor \(rp3\) Asr 1001 Asr 1001-hx Asr 1001-hx R Asr 1001-x Asr 1001-x R Asr 1002 Asr 1002-hx Asr 1002-hx R Asr 1002-x Asr 1002-x R Asr 1004 Asr 1006 Asr 1006-x Asr 1009-x Asr 1013 Asr 1023 Csr 1000v Ios Xe Sd-wan

Link	Providers
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Cisco IOS XE SD-WAN Software", "vendor": "Cisco", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2021-09-22T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges."}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "description": "CWE-77", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-09-23T02:26:19", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS"}], "source": {"advisory": "cisco-sa-sdwan-maapi-privesc-KSUg7QSS", "defect": [["CSCvu26766"]], "discovery": "INTERNAL"}, "title": "Cisco IOS XE SD-WAN Software Command Injection Vulnerability", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "DATE_PUBLIC": "2021-09-22T16:00:00", "ID": "CVE-2021-34725", "STATE": "PUBLIC", "TITLE": "Cisco IOS XE SD-WAN Software Command Injection Vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Cisco IOS XE SD-WAN Software", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "Cisco"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges."}]}, "exploit": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "impact": {"cvss": {"baseScore": "6.7", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-77"}]}]}, "references": {"reference_data": [{"name": "20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability", "refsource": "CISCO", "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS"}]}, "source": {"advisory": "cisco-sa-sdwan-maapi-privesc-KSUg7QSS", "defect": [["CSCvu26766"]], "discovery": "INTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T00:19:48.128Z"}, "title": "CVE Program Container", "references": [{"name": "20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-07T21:43:04.850695Z", "id": "CVE-2021-34725", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-07T21:58:45.239Z"}}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2021-34725", "datePublished": "2021-09-23T02:26:19.249372Z", "dateReserved": "2021-06-15T00:00:00", "dateUpdated": "2024-11-07T21:58:45.239Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Cisco IOS XE SD-WAN Software (string)

vendor : Cisco (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2021-09-22T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-77 (string)

description : CWE-77 (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-09-23T02:26:19 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

}

]

source : { »

advisory : cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

defect : [ »

0 : [ »

0 : CSCvu26766 (string)

]

discovery : INTERNAL (string)

}

title : Cisco IOS XE SD-WAN Software Command Injection Vulnerability (string)

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

DATE_PUBLIC : 2021-09-22T16:00:00 (string)

ID : CVE-2021-34725 (string)

STATE : PUBLIC (string)

TITLE : Cisco IOS XE SD-WAN Software Command Injection Vulnerability (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Cisco IOS XE SD-WAN Software (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : Cisco (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges. (string)

}

]

}

exploit : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory. (string)

}

]

impact : { »

cvss : { »

baseScore : 6.7 (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-77 (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability (string)

refsource : CISCO (string)

url : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

}

]

}

source : { »

advisory : cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

defect : [ »

0 : [ »

0 : CSCvu26766 (string)

]

discovery : INTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T00:19:48.128Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20210922 Cisco IOS XE SD-WAN Software Command Injection Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-07T21:43:04.850695Z (string)

id : CVE-2021-34725 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-07T21:58:45.239Z (string)

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2021-34725 (string)

datePublished : 2021-09-23T02:26:19.249372Z (string)

dateReserved : 2021-06-15T00:00:00 (string)

dateUpdated : 2024-11-07T21:58:45.239Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:*", "matchCriteriaId": "2108544A-5C67-483F-926E-0830CC7808FA", "versionEndIncluding": "17.2.1r", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4856E07-B3C2-4674-9584-866F6AF643B2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6F668B9-2C1D-4306-8286-35E67D0F67C7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2D2305B-B69E-4F74-A44E-07B3205CE9F7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "5EB8A757-7888-4AC2-BE44-B89DB83C6C77", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "B80890A8-E3D3-462C-B125-9E9BC6525B02", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "0547E196-5991-4C33-823A-342542E9DFD3", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "D916389F-54DB-44CB-91DD-7CE3C7059350", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "03A273EE-41C1-41E9-9002-46F83FC6533F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C8AED7C-DDA3-4C29-BB95-6518C02C551A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "9421DBEF-AE42-4234-B49F-FCC34B804D7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "5419CB9F-241F-4431-914F-2659BE27BEA5", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "5720462A-BE6B-4E84-A1A1-01E80BBA86AD", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "818CEFA6-208C-43C3-8E43-474A93ADCF21", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "82225D40-537F-41D2-B1C4-1B7D06466B06", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8B60888-6E2B-494E-AC65-83337661EE7D", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "91209C16-A620-44A0-9134-8AA456343F29", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3C5C1005-0C12-4EDA-BC4A-B52201C4F516", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE2182E7-C813-4966-A36C-E648A9344299", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000_series:-:*:*:*:*:*:*:*", "matchCriteriaId": "76B7C13F-46C5-460A-A6C9-3837A28A0CE2", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000_series_route_processor_\\(rp2\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "C02F9303-F9DF-4166-AB4B-8C26B9FAD109", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1000_series_route_processor_\\(rp3\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "372CB4D6-BB22-4521-9C18-C0A663717168", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED7C321E-F083-4AB6-96A0-D6358980441E", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*", "matchCriteriaId": "7594E307-AC80-41EC-AE94-07E664A7D701", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*", "matchCriteriaId": "33208B25-0CBB-4E31-A892-60B7B5625155", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*", "matchCriteriaId": "09C913FF-63D5-43FB-8B39-598EF436BA5A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*", "matchCriteriaId": "241EEBD9-76E4-4AE6-96B8-1C1ACD834F17", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4376E56-A21C-4642-A85D-439C8E21CD7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD2794BD-C8CE-46EF-9857-1723FCF04E46", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC03A84F-C8F2-4225-9A00-8FA35368CD57", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*", "matchCriteriaId": "444F688F-79D0-4F22-B530-7BD520080B8F", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*", "matchCriteriaId": "51F2A755-556C-4C5E-8622-96D124319AF7", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*", "matchCriteriaId": "55DD2272-10C2-43B9-9F13-6DC41DBE179B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*", "matchCriteriaId": "7428E0A8-1641-47FB-9CA9-34311DEF660D", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE7401B7-094C-46EB-9869-2F0372E8B26B", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*", "matchCriteriaId": "854D9594-FE84-4E7B-BA21-A3287F2DC302", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*", "matchCriteriaId": "C81CC6E3-B989-4730-820E-46734E3E608D", "vulnerable": false}, {"criteria": "cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF8B0B49-2C99-410B-B011-5B821C5992FB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges."}, {"lang": "es", "value": "Una vulnerabilidad en la CLI de Cisco IOS XE SD-WAN Software podr\u00eda permitir a un atacante local autenticado inyectar comandos arbitrarios para ejecutarlos con privilegios de nivel de root en el sistema operativo subyacente. Esta vulnerabilidad es debido a una insuficiente comprobaci\u00f3n de entrada en determinados comandos de la CLI. Un atacante podr\u00eda explotar esta vulnerabilidad al autenticarse en un dispositivo afectado y enviando entradas dise\u00f1adas a la CLI. El atacante debe estar autenticado como usuario administrativo para ejecutar los comandos afectados. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante ejecutar comandos con privilegios de nivel de root"}], "id": "CVE-2021-34725", "lastModified": "2024-11-21T06:11:03.450", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "ykramarz@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-09-23T03:15:19.093", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "ykramarz@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 2108544A-5C67-483F-926E-0830CC7808FA (string)

versionEndIncluding : 17.2.1r (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:1000_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F4856E07-B3C2-4674-9584-866F6AF643B2 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:cisco:1100-4g\/6g_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A6F668B9-2C1D-4306-8286-35E67D0F67C7 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A2D2305B-B69E-4F74-A44E-07B3205CE9F7 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1952B64C-4AE0-4CCB-86C5-8D1FF6A12822 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5AAD4397-6DCF-493A-BD61-3A890F6F3AB2 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5EB8A757-7888-4AC2-BE44-B89DB83C6C77 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB9229F3-7BCE-46C4-9879-D57B5BAAE44E (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B80890A8-E3D3-462C-B125-9E9BC6525B02 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0547E196-5991-4C33-823A-342542E9DFD3 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 802CBFC1-8A2F-4BF7-A1D3-00622C33BE16 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D916389F-54DB-44CB-91DD-7CE3C7059350 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE82335E-ECEC-47BD-BC4A-5FDEA08D1A18 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:cisco:422_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 03A273EE-41C1-41E9-9002-46F83FC6533F (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C8AED7C-DDA3-4C29-BB95-6518C02C551A (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9421DBEF-AE42-4234-B49F-FCC34B804D7F (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5419CB9F-241F-4431-914F-2659BE27BEA5 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5720462A-BE6B-4E84-A1A1-01E80BBA86AD (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 818CEFA6-208C-43C3-8E43-474A93ADCF21 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 82225D40-537F-41D2-B1C4-1B7D06466B06 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E8B60888-6E2B-494E-AC65-83337661EE7D (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 91209C16-A620-44A0-9134-8AA456343F29 (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:cisco:asr_1000-esp100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3C5C1005-0C12-4EDA-BC4A-B52201C4F516 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FE2182E7-C813-4966-A36C-E648A9344299 (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:cisco:asr_1000_series:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 76B7C13F-46C5-460A-A6C9-3837A28A0CE2 (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:cisco:asr_1000_series_route_processor_\(rp2\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : C02F9303-F9DF-4166-AB4B-8C26B9FAD109 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:cisco:asr_1000_series_route_processor_\(rp3\):-:*:*:*:*:*:*:* (string)

matchCriteriaId : 372CB4D6-BB22-4521-9C18-C0A663717168 (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:* (string)

matchCriteriaId : ED7C321E-F083-4AB6-96A0-D6358980441E (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7594E307-AC80-41EC-AE94-07E664A7D701 (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 33208B25-0CBB-4E31-A892-60B7B5625155 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 09C913FF-63D5-43FB-8B39-598EF436BA5A (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 241EEBD9-76E4-4AE6-96B8-1C1ACD834F17 (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E4376E56-A21C-4642-A85D-439C8E21CD7F (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD2794BD-C8CE-46EF-9857-1723FCF04E46 (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CC03A84F-C8F2-4225-9A00-8FA35368CD57 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 444F688F-79D0-4F22-B530-7BD520080B8F (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 51F2A755-556C-4C5E-8622-96D124319AF7 (string)

vulnerable : false (boolean)

}

41 : { »

criteria : cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 55DD2272-10C2-43B9-9F13-6DC41DBE179B (string)

vulnerable : false (boolean)

}

42 : { »

criteria : cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7428E0A8-1641-47FB-9CA9-34311DEF660D (string)

vulnerable : false (boolean)

}

43 : { »

criteria : cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DE7401B7-094C-46EB-9869-2F0372E8B26B (string)

vulnerable : false (boolean)

}

44 : { »

criteria : cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D8A72FD-D8B0-45B5-8FAD-6D8395BB218A (string)

vulnerable : false (boolean)

}

45 : { »

criteria : cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 854D9594-FE84-4E7B-BA21-A3287F2DC302 (string)

vulnerable : false (boolean)

}

46 : { »

criteria : cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C81CC6E3-B989-4730-820E-46734E3E608D (string)

vulnerable : false (boolean)

}

47 : { »

criteria : cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF8B0B49-2C99-410B-B011-5B821C5992FB (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en la CLI de Cisco IOS XE SD-WAN Software podría permitir a un atacante local autenticado inyectar comandos arbitrarios para ejecutarlos con privilegios de nivel de root en el sistema operativo subyacente. Esta vulnerabilidad es debido a una insuficiente comprobación de entrada en determinados comandos de la CLI. Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo afectado y enviando entradas diseñadas a la CLI. El atacante debe estar autenticado como usuario administrativo para ejecutar los comandos afectados. Una explotación con éxito podría permitir al atacante ejecutar comandos con privilegios de nivel de root (string)

}

]

id : CVE-2021-34725 (string)

lastModified : 2024-11-21T06:11:03.450 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : ykramarz@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-09-23T03:15:19.093 (string)

references : [ »

0 : { »

source : ykramarz@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS (string)

}

]

sourceIdentifier : ykramarz@cisco.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : ykramarz@cisco.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object