PT-2021-2497 · Cisco · Cisco Iox+2

Cyrille Chatras · Published 2021-03-24 · Updated 2022-05-12 · CVE-2021-1385

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Cisco IOx (affected versions not specified)

Description: A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This issue occurs because the device does not properly validate URIs in IOx API requests. An attacker could exploit this vulnerability by sending a crafted API request that contains directory traversal character sequences to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2021-01873

CVE-2021-1385

GHSA-HHFW-6CM2-V3W5

Affected Products

Cisco Iox

Cisco Ios

Cisco Ios Xe

References · 6

• 🔥 https://github.com/orangecertcc/security-research/security/advisories/GHSA-hhfw-6cm2-v3w5 · Exploit
• https://osv.dev/vulnerability/CVE-2021-1385 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01873 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1385 · Security Note