PT-2021-1917 · Cisco · Cisco Ios Xr

Published 2021-02-03 · Updated 2021-02-08 · CVE-2021-1370

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software versions for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images (affected versions not specified)

Description A vulnerability in a CLI command could allow an authenticated, local attacker to elevate their privilege to root. The vulnerability is due to insufficient validation of command line arguments. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the prompt. A successful exploit could allow an attacker with low-level privileges to escalate their privilege level to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, it is mentioned that Cisco has released software updates that address this vulnerability. As a temporary workaround, consider restricting access to the CLI command until a patch is available. Avoid using crafted commands at the prompt until the issue is resolved.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2021-00707

CVE-2021-1370

Affected Products

Cisco Ios Xr

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pe-QpzCAePe · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00707 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1370 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1370 · Vendor Advisory
• https://t.me/cvenotify/9439 · Telegram Post
• https://t.me/cibsecurity/23090 · Telegram Post