PT-2021-2555 · Cisco · Cisco Ios Xe

X.B · Published 2021-03-24 · Updated 2021-03-30 · CVE-2021-1442

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified)

Description: The issue is related to insufficient protection of sensitive information in the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software. This could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user on an affected device. An attacker with low privileges could exploit this by issuing the diagnostic CLI show pnp profile when a specific PnP listener is enabled on the device, potentially obtaining a privileged authentication token to send crafted PnP messages and execute privileged commands.

Recommendations: For Cisco IOS XE Software, update to a version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. As a temporary workaround, consider disabling the PnP listener when not necessary to minimize the risk of exploitation. Restrict access to the diagnostic CLI show pnp profile to authorized personnel only.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2021-01963

CVE-2021-1442

Affected Products

Cisco Ios Xe

References · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1442 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1442 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01963 · Security Note
• https://t.me/cvenotify/12333 · Telegram Post