7.8

CVE-2021-1392

A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Ios Version15.0(1)ey
Cisco ≫ Ios Version15.0(1)ey1
Cisco ≫ Ios Version15.0(1)ey2
Cisco ≫ Ios Version15.1(3)svs
Cisco ≫ Ios Version15.1(3)svt1
Cisco ≫ Ios Version15.2(1)ey
Cisco ≫ Ios Version15.2(2)e
Cisco ≫ Ios Version15.2(2)e1
Cisco ≫ Ios Version15.2(2)e2
Cisco ≫ Ios Version15.2(2)e3
Cisco ≫ Ios Version15.2(2)e4
Cisco ≫ Ios Version15.2(2)e5
Cisco ≫ Ios Version15.2(2)e5a
Cisco ≫ Ios Version15.2(2)e5b
Cisco ≫ Ios Version15.2(2)e6
Cisco ≫ Ios Version15.2(2)e7
Cisco ≫ Ios Version15.2(2)e7b
Cisco ≫ Ios Version15.2(2)e8
Cisco ≫ Ios Version15.2(2)e9
Cisco ≫ Ios Version15.2(2)e10
Cisco ≫ Ios Version15.2(2)ea
Cisco ≫ Ios Version15.2(2)ea1
Cisco ≫ Ios Version15.2(2)ea2
Cisco ≫ Ios Version15.2(2)ea3
Cisco ≫ Ios Version15.2(2)eb
Cisco ≫ Ios Version15.2(2)eb1
Cisco ≫ Ios Version15.2(2)eb2
Cisco ≫ Ios Version15.2(2a)e2
Cisco ≫ Ios Version15.2(2b)e
Cisco ≫ Ios Version15.2(3)e1
Cisco ≫ Ios Version15.2(3)e2
Cisco ≫ Ios Version15.2(3)e3
Cisco ≫ Ios Version15.2(3)e4
Cisco ≫ Ios Version15.2(3)e5
Cisco ≫ Ios Version15.2(3)ea
Cisco ≫ Ios Version15.2(4)e5a
Cisco ≫ Ios Version15.2(4)ea
Cisco ≫ Ios Version15.2(4)ea1
Cisco ≫ Ios Version15.2(4)ea2
Cisco ≫ Ios Version15.2(4)ea3
Cisco ≫ Ios Version15.2(4)ea4
Cisco ≫ Ios Version15.2(4)ea5
Cisco ≫ Ios Version15.2(4)ea6
Cisco ≫ Ios Version15.2(4)ea7
Cisco ≫ Ios Version15.2(4)ea8
Cisco ≫ Ios Version15.2(4)ea9
Cisco ≫ Ios Version15.2(4)ea9a
Cisco ≫ Ios Version15.2(4)ea10
Cisco ≫ Ios Version15.2(4)ec1
Cisco ≫ Ios Version15.2(4)ec2
Cisco ≫ Ios Version15.2(4)jaz
Cisco ≫ Ios Version15.2(5)e
Cisco ≫ Ios Version15.2(5)e1
Cisco ≫ Ios Version15.2(5)e2
Cisco ≫ Ios Version15.2(5)e2b
Cisco ≫ Ios Version15.2(5)e2c
Cisco ≫ Ios Version15.2(5)ea
Cisco ≫ Ios Version15.2(5a)e1
Cisco ≫ Ios Version15.2(6)e
Cisco ≫ Ios Version15.2(6)e0a
Cisco ≫ Ios Version15.2(6)e0c
Cisco ≫ Ios Version15.2(6)e1
Cisco ≫ Ios Version15.2(6)e1a
Cisco ≫ Ios Version15.2(6)e1s
Cisco ≫ Ios Version15.2(7)e0b
Cisco ≫ Ios Version15.2(7a)e0b
Cisco ≫ Ios Version15.2(7b)e0b
Cisco ≫ Ios Version15.3(3)ja1
Cisco ≫ Ios Version15.3(3)ja4
Cisco ≫ Ios Version15.3(3)ja5
Cisco ≫ Ios Version15.3(3)ja6
Cisco ≫ Ios Version15.3(3)ja7
Cisco ≫ Ios Version15.3(3)ja8
Cisco ≫ Ios Version15.3(3)ja10
Cisco ≫ Ios Version15.3(3)ja11
Cisco ≫ Ios Version15.3(3)ja12
Cisco ≫ Ios Version15.3(3)jaa
Cisco ≫ Ios Version15.3(3)jax
Cisco ≫ Ios Version15.3(3)jax1
Cisco ≫ Ios Version15.3(3)jax2
Cisco ≫ Ios Version15.3(3)jb
Cisco ≫ Ios Version15.3(3)jbb
Cisco ≫ Ios Version15.3(3)jbb1
Cisco ≫ Ios Version15.3(3)jbb2
Cisco ≫ Ios Version15.3(3)jbb4
Cisco ≫ Ios Version15.3(3)jbb5
Cisco ≫ Ios Version15.3(3)jbb6
Cisco ≫ Ios Version15.3(3)jbb6a
Cisco ≫ Ios Version15.3(3)jbb8
Cisco ≫ Ios Version15.3(3)jc
Cisco ≫ Ios Version15.3(3)jc1
Cisco ≫ Ios Version15.3(3)jc2
Cisco ≫ Ios Version15.3(3)jc3
Cisco ≫ Ios Version15.3(3)jc4
Cisco ≫ Ios Version15.3(3)jc5
Cisco ≫ Ios Version15.3(3)jc6
Cisco ≫ Ios Version15.3(3)jc8
Cisco ≫ Ios Version15.3(3)jc9
Cisco ≫ Ios Version15.3(3)jc14
Cisco ≫ Ios Version15.3(3)jd
Cisco ≫ Ios Version15.3(3)jd2
Cisco ≫ Ios Version15.3(3)jd3
Cisco ≫ Ios Version15.3(3)jd4
Cisco ≫ Ios Version15.3(3)jd5
Cisco ≫ Ios Version15.3(3)jd6
Cisco ≫ Ios Version15.3(3)jd7
Cisco ≫ Ios Version15.3(3)jd8
Cisco ≫ Ios Version15.3(3)jd9
Cisco ≫ Ios Version15.3(3)jd11
Cisco ≫ Ios Version15.3(3)jd12
Cisco ≫ Ios Version15.3(3)jd13
Cisco ≫ Ios Version15.3(3)jd14
Cisco ≫ Ios Version15.3(3)jd16
Cisco ≫ Ios Version15.3(3)jd17
Cisco ≫ Ios Version15.3(3)je
Cisco ≫ Ios Version15.3(3)jf
Cisco ≫ Ios Version15.3(3)jf1
Cisco ≫ Ios Version15.3(3)jf2
Cisco ≫ Ios Version15.3(3)jf4
Cisco ≫ Ios Version15.3(3)jf5
Cisco ≫ Ios Version15.3(3)jf6
Cisco ≫ Ios Version15.3(3)jf7
Cisco ≫ Ios Version15.3(3)jf8
Cisco ≫ Ios Version15.3(3)jf9
Cisco ≫ Ios Version15.3(3)jf10
Cisco ≫ Ios Version15.3(3)jf11
Cisco ≫ Ios Version15.3(3)jf12
Cisco ≫ Ios Version15.3(3)jf12i
Cisco ≫ Ios Version15.3(3)jf13
Cisco ≫ Ios Version15.3(3)jg
Cisco ≫ Ios Version15.3(3)jg1
Cisco ≫ Ios Version15.3(3)jh
Cisco ≫ Ios Version15.3(3)jh1
Cisco ≫ Ios Version15.3(3)ji1
Cisco ≫ Ios Version15.3(3)ji3
Cisco ≫ Ios Version15.3(3)ji4
Cisco ≫ Ios Version15.3(3)ji5
Cisco ≫ Ios Version15.3(3)ji6
Cisco ≫ Ios Version15.3(3)jj
Cisco ≫ Ios Version15.3(3)jj1
Cisco ≫ Ios Version15.3(3)jk
Cisco ≫ Ios Version15.3(3)jk1
Cisco ≫ Ios Version15.3(3)jk1t
Cisco ≫ Ios Version15.3(3)jk2
Cisco ≫ Ios Version15.3(3)jk2a
Cisco ≫ Ios Version15.3(3)jk3
Cisco ≫ Ios Version15.3(3)jk4
Cisco ≫ Ios Version15.3(3)jn
Cisco ≫ Ios Version15.3(3)jn3
Cisco ≫ Ios Version15.3(3)jn4
Cisco ≫ Ios Version15.3(3)jn6
Cisco ≫ Ios Version15.3(3)jn7
Cisco ≫ Ios Version15.3(3)jn8
Cisco ≫ Ios Version15.3(3)jn9
Cisco ≫ Ios Version15.3(3)jn11
Cisco ≫ Ios Version15.3(3)jn13
Cisco ≫ Ios Version15.3(3)jn14
Cisco ≫ Ios Version15.3(3)jn15
Cisco ≫ Ios Version15.3(3)jnb
Cisco ≫ Ios Version15.3(3)jnb1
Cisco ≫ Ios Version15.3(3)jnb2
Cisco ≫ Ios Version15.3(3)jnb3
Cisco ≫ Ios Version15.3(3)jnb4
Cisco ≫ Ios Version15.3(3)jnb5
Cisco ≫ Ios Version15.3(3)jnb6
Cisco ≫ Ios Version15.3(3)jnc
Cisco ≫ Ios Version15.3(3)jnc1
Cisco ≫ Ios Version15.3(3)jnc2
Cisco ≫ Ios Version15.3(3)jnc3
Cisco ≫ Ios Version15.3(3)jnc4
Cisco ≫ Ios Version15.3(3)jnd
Cisco ≫ Ios Version15.3(3)jnd1
Cisco ≫ Ios Version15.3(3)jnd2
Cisco ≫ Ios Version15.3(3)jnd3
Cisco ≫ Ios Version15.3(3)jnp
Cisco ≫ Ios Version15.3(3)jnp1
Cisco ≫ Ios Version15.3(3)jnp3
Cisco ≫ Ios Version15.3(3)jpb
Cisco ≫ Ios Version15.3(3)jpb1
Cisco ≫ Ios Version15.3(3)jpc
Cisco ≫ Ios Version15.3(3)jpc1
Cisco ≫ Ios Version15.3(3)jpc2
Cisco ≫ Ios Version15.3(3)jpc3
Cisco ≫ Ios Version15.3(3)jpc5
Cisco ≫ Ios Version15.3(3)jpd
Cisco ≫ Ios Xe Version3.3.0xo
Cisco ≫ Ios Xe Version3.3.1xo
Cisco ≫ Ios Xe Version3.3.2xo
Cisco ≫ Ios Xe Version3.6.5be
Cisco ≫ Ios Xe Version3.7.4e
Cisco ≫ Ios Xe Version3.7.5e
Cisco ≫ Ios Xe Version16.9.1
Cisco ≫ Ios Xe Version16.9.1d
Cisco ≫ Ios Xe Version16.10.1
Cisco ≫ Ios Xe Version16.10.1e
Cisco ≫ Ios Xe Version16.11.1
Cisco ≫ Ios Xe Version16.11.1a
Cisco ≫ Ios Xe Version16.11.1c
Cisco ≫ Ios Xe Version16.11.1s
Cisco ≫ Ios Xe Version16.11.2
Cisco ≫ Ios Xe Version16.12.1
Cisco ≫ Ios Xe Version16.12.1c
Cisco ≫ Ios Xe Version16.12.1s
Cisco ≫ Ios Xe Version16.12.2
Cisco ≫ Ios Xe Version16.12.2s
Cisco ≫ Ios Xe Version16.12.2t
Cisco ≫ Ios Xe Version16.12.3
Cisco ≫ Ios Xe Version16.12.3s
Cisco ≫ Ios Xe Version16.12.4
Cisco ≫ Ios Xe Version17.1.1
Cisco ≫ Ios Xe Version17.1.1s
Cisco ≫ Ios Xe Version17.1.1t
Cisco ≫ Ios Xe Version17.1.2
Cisco ≫ Ios Xe Version17.2.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.075
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
psirt@cisco.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.