PT-2021-2508 · Cisco · Cisco Ios+1

X.B · Published 2021-03-24 · Updated 2021-03-30 · CVE-2021-1391

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified) Cisco IOS Software (affected versions not specified)

Description A vulnerability in the dragonite debugger could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The issue is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this by bypassing the consent token mechanism with the residual scripts on the affected device, potentially allowing them to escalate privileges.

Recommendations For Cisco IOS XE Software, update to a version that includes the fix for this issue. For Cisco IOS Software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the dragonite debugger until a patch is available. Avoid using the residual scripts on the affected device to minimize the risk of exploitation. At the moment, there is no information about specific versions that contain a fix for this vulnerability, but Cisco has released software updates that address this issue.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

BDU:2021-01884

CVE-2021-1391

Affected Products

Cisco Ios

Cisco Ios Xe

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-FSM-Yj8qJbJc · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01884 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1391 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1391 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-FSM-Yj8qJbJc · Vendor Advisory
• https://t.me/cvenotify/12291 · Telegram Post