7.8

CVE-2021-1392

Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability

A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version 15.0(1)ey
Cisco ≫ Ios Version 15.0(1)ey1
Cisco ≫ Ios Version 15.0(1)ey2
Cisco ≫ Ios Version 15.1(3)svs
Cisco ≫ Ios Version 15.1(3)svt1
Cisco ≫ Ios Version 15.2(1)ey
Cisco ≫ Ios Version 15.2(2)e
Cisco ≫ Ios Version 15.2(2)e1
Cisco ≫ Ios Version 15.2(2)e2
Cisco ≫ Ios Version 15.2(2)e3
Cisco ≫ Ios Version 15.2(2)e4
Cisco ≫ Ios Version 15.2(2)e5
Cisco ≫ Ios Version 15.2(2)e5a
Cisco ≫ Ios Version 15.2(2)e5b
Cisco ≫ Ios Version 15.2(2)e6
Cisco ≫ Ios Version 15.2(2)e7
Cisco ≫ Ios Version 15.2(2)e7b
Cisco ≫ Ios Version 15.2(2)e8
Cisco ≫ Ios Version 15.2(2)e9
Cisco ≫ Ios Version 15.2(2)e10
Cisco ≫ Ios Version 15.2(2)ea
Cisco ≫ Ios Version 15.2(2)ea1
Cisco ≫ Ios Version 15.2(2)ea2
Cisco ≫ Ios Version 15.2(2)ea3
Cisco ≫ Ios Version 15.2(2)eb
Cisco ≫ Ios Version 15.2(2)eb1
Cisco ≫ Ios Version 15.2(2)eb2
Cisco ≫ Ios Version 15.2(2a)e2
Cisco ≫ Ios Version 15.2(2b)e
Cisco ≫ Ios Version 15.2(3)e1
Cisco ≫ Ios Version 15.2(3)e2
Cisco ≫ Ios Version 15.2(3)e3
Cisco ≫ Ios Version 15.2(3)e4
Cisco ≫ Ios Version 15.2(3)e5
Cisco ≫ Ios Version 15.2(3)ea
Cisco ≫ Ios Version 15.2(4)e5a
Cisco ≫ Ios Version 15.2(4)ea
Cisco ≫ Ios Version 15.2(4)ea1
Cisco ≫ Ios Version 15.2(4)ea2
Cisco ≫ Ios Version 15.2(4)ea3
Cisco ≫ Ios Version 15.2(4)ea4
Cisco ≫ Ios Version 15.2(4)ea5
Cisco ≫ Ios Version 15.2(4)ea6
Cisco ≫ Ios Version 15.2(4)ea7
Cisco ≫ Ios Version 15.2(4)ea8
Cisco ≫ Ios Version 15.2(4)ea9
Cisco ≫ Ios Version 15.2(4)ea9a
Cisco ≫ Ios Version 15.2(4)ea10
Cisco ≫ Ios Version 15.2(4)ec1
Cisco ≫ Ios Version 15.2(4)ec2
Cisco ≫ Ios Version 15.2(4)jaz
Cisco ≫ Ios Version 15.2(5)e
Cisco ≫ Ios Version 15.2(5)e1
Cisco ≫ Ios Version 15.2(5)e2
Cisco ≫ Ios Version 15.2(5)e2b
Cisco ≫ Ios Version 15.2(5)e2c
Cisco ≫ Ios Version 15.2(5)ea
Cisco ≫ Ios Version 15.2(5a)e1
Cisco ≫ Ios Version 15.2(6)e
Cisco ≫ Ios Version 15.2(6)e0a
Cisco ≫ Ios Version 15.2(6)e0c
Cisco ≫ Ios Version 15.2(6)e1
Cisco ≫ Ios Version 15.2(6)e1a
Cisco ≫ Ios Version 15.2(6)e1s
Cisco ≫ Ios Version 15.2(7)e0b
Cisco ≫ Ios Version 15.2(7a)e0b
Cisco ≫ Ios Version 15.2(7b)e0b
Cisco ≫ Ios Version 15.3(3)ja1
Cisco ≫ Ios Version 15.3(3)ja4
Cisco ≫ Ios Version 15.3(3)ja5
Cisco ≫ Ios Version 15.3(3)ja6
Cisco ≫ Ios Version 15.3(3)ja7
Cisco ≫ Ios Version 15.3(3)ja8
Cisco ≫ Ios Version 15.3(3)ja10
Cisco ≫ Ios Version 15.3(3)ja11
Cisco ≫ Ios Version 15.3(3)ja12
Cisco ≫ Ios Version 15.3(3)jaa
Cisco ≫ Ios Version 15.3(3)jax
Cisco ≫ Ios Version 15.3(3)jax1
Cisco ≫ Ios Version 15.3(3)jax2
Cisco ≫ Ios Version 15.3(3)jb
Cisco ≫ Ios Version 15.3(3)jbb
Cisco ≫ Ios Version 15.3(3)jbb1
Cisco ≫ Ios Version 15.3(3)jbb2
Cisco ≫ Ios Version 15.3(3)jbb4
Cisco ≫ Ios Version 15.3(3)jbb5
Cisco ≫ Ios Version 15.3(3)jbb6
Cisco ≫ Ios Version 15.3(3)jbb6a
Cisco ≫ Ios Version 15.3(3)jbb8
Cisco ≫ Ios Version 15.3(3)jc
Cisco ≫ Ios Version 15.3(3)jc1
Cisco ≫ Ios Version 15.3(3)jc2
Cisco ≫ Ios Version 15.3(3)jc3
Cisco ≫ Ios Version 15.3(3)jc4
Cisco ≫ Ios Version 15.3(3)jc5
Cisco ≫ Ios Version 15.3(3)jc6
Cisco ≫ Ios Version 15.3(3)jc8
Cisco ≫ Ios Version 15.3(3)jc9
Cisco ≫ Ios Version 15.3(3)jc14
Cisco ≫ Ios Version 15.3(3)jd
Cisco ≫ Ios Version 15.3(3)jd2
Cisco ≫ Ios Version 15.3(3)jd3
Cisco ≫ Ios Version 15.3(3)jd4
Cisco ≫ Ios Version 15.3(3)jd5
Cisco ≫ Ios Version 15.3(3)jd6
Cisco ≫ Ios Version 15.3(3)jd7
Cisco ≫ Ios Version 15.3(3)jd8
Cisco ≫ Ios Version 15.3(3)jd9
Cisco ≫ Ios Version 15.3(3)jd11
Cisco ≫ Ios Version 15.3(3)jd12
Cisco ≫ Ios Version 15.3(3)jd13
Cisco ≫ Ios Version 15.3(3)jd14
Cisco ≫ Ios Version 15.3(3)jd16
Cisco ≫ Ios Version 15.3(3)jd17
Cisco ≫ Ios Version 15.3(3)je
Cisco ≫ Ios Version 15.3(3)jf
Cisco ≫ Ios Version 15.3(3)jf1
Cisco ≫ Ios Version 15.3(3)jf2
Cisco ≫ Ios Version 15.3(3)jf4
Cisco ≫ Ios Version 15.3(3)jf5
Cisco ≫ Ios Version 15.3(3)jf6
Cisco ≫ Ios Version 15.3(3)jf7
Cisco ≫ Ios Version 15.3(3)jf8
Cisco ≫ Ios Version 15.3(3)jf9
Cisco ≫ Ios Version 15.3(3)jf10
Cisco ≫ Ios Version 15.3(3)jf11
Cisco ≫ Ios Version 15.3(3)jf12
Cisco ≫ Ios Version 15.3(3)jf12i
Cisco ≫ Ios Version 15.3(3)jf13
Cisco ≫ Ios Version 15.3(3)jg
Cisco ≫ Ios Version 15.3(3)jg1
Cisco ≫ Ios Version 15.3(3)jh
Cisco ≫ Ios Version 15.3(3)jh1
Cisco ≫ Ios Version 15.3(3)ji1
Cisco ≫ Ios Version 15.3(3)ji3
Cisco ≫ Ios Version 15.3(3)ji4
Cisco ≫ Ios Version 15.3(3)ji5
Cisco ≫ Ios Version 15.3(3)ji6
Cisco ≫ Ios Version 15.3(3)jj
Cisco ≫ Ios Version 15.3(3)jj1
Cisco ≫ Ios Version 15.3(3)jk
Cisco ≫ Ios Version 15.3(3)jk1
Cisco ≫ Ios Version 15.3(3)jk1t
Cisco ≫ Ios Version 15.3(3)jk2
Cisco ≫ Ios Version 15.3(3)jk2a
Cisco ≫ Ios Version 15.3(3)jk3
Cisco ≫ Ios Version 15.3(3)jk4
Cisco ≫ Ios Version 15.3(3)jn
Cisco ≫ Ios Version 15.3(3)jn3
Cisco ≫ Ios Version 15.3(3)jn4
Cisco ≫ Ios Version 15.3(3)jn6
Cisco ≫ Ios Version 15.3(3)jn7
Cisco ≫ Ios Version 15.3(3)jn8
Cisco ≫ Ios Version 15.3(3)jn9
Cisco ≫ Ios Version 15.3(3)jn11
Cisco ≫ Ios Version 15.3(3)jn13
Cisco ≫ Ios Version 15.3(3)jn14
Cisco ≫ Ios Version 15.3(3)jn15
Cisco ≫ Ios Version 15.3(3)jnb
Cisco ≫ Ios Version 15.3(3)jnb1
Cisco ≫ Ios Version 15.3(3)jnb2
Cisco ≫ Ios Version 15.3(3)jnb3
Cisco ≫ Ios Version 15.3(3)jnb4
Cisco ≫ Ios Version 15.3(3)jnb5
Cisco ≫ Ios Version 15.3(3)jnb6
Cisco ≫ Ios Version 15.3(3)jnc
Cisco ≫ Ios Version 15.3(3)jnc1
Cisco ≫ Ios Version 15.3(3)jnc2
Cisco ≫ Ios Version 15.3(3)jnc3
Cisco ≫ Ios Version 15.3(3)jnc4
Cisco ≫ Ios Version 15.3(3)jnd
Cisco ≫ Ios Version 15.3(3)jnd1
Cisco ≫ Ios Version 15.3(3)jnd2
Cisco ≫ Ios Version 15.3(3)jnd3
Cisco ≫ Ios Version 15.3(3)jnp
Cisco ≫ Ios Version 15.3(3)jnp1
Cisco ≫ Ios Version 15.3(3)jnp3
Cisco ≫ Ios Version 15.3(3)jpb
Cisco ≫ Ios Version 15.3(3)jpb1
Cisco ≫ Ios Version 15.3(3)jpc
Cisco ≫ Ios Version 15.3(3)jpc1
Cisco ≫ Ios Version 15.3(3)jpc2
Cisco ≫ Ios Version 15.3(3)jpc3
Cisco ≫ Ios Version 15.3(3)jpc5
Cisco ≫ Ios Version 15.3(3)jpd
Cisco ≫ Ios Xe Version 3.3.0xo
Cisco ≫ Ios Xe Version 3.3.1xo
Cisco ≫ Ios Xe Version 3.3.2xo
Cisco ≫ Ios Xe Version 3.6.5be
Cisco ≫ Ios Xe Version 3.7.4e
Cisco ≫ Ios Xe Version 3.7.5e
Cisco ≫ Ios Xe Version 16.9.1
Cisco ≫ Ios Xe Version 16.9.1d
Cisco ≫ Ios Xe Version 16.10.1
Cisco ≫ Ios Xe Version 16.10.1e
Cisco ≫ Ios Xe Version 16.11.1
Cisco ≫ Ios Xe Version 16.11.1a
Cisco ≫ Ios Xe Version 16.11.1c
Cisco ≫ Ios Xe Version 16.11.1s
Cisco ≫ Ios Xe Version 16.11.2
Cisco ≫ Ios Xe Version 16.12.1
Cisco ≫ Ios Xe Version 16.12.1c
Cisco ≫ Ios Xe Version 16.12.1s
Cisco ≫ Ios Xe Version 16.12.2
Cisco ≫ Ios Xe Version 16.12.2s
Cisco ≫ Ios Xe Version 16.12.2t
Cisco ≫ Ios Xe Version 16.12.3
Cisco ≫ Ios Xe Version 16.12.3s
Cisco ≫ Ios Xe Version 16.12.4
Cisco ≫ Ios Xe Version 17.1.1
Cisco ≫ Ios Xe Version 17.1.1s
Cisco ≫ Ios Xe Version 17.1.1t
Cisco ≫ Ios Xe Version 17.1.2
Cisco ≫ Ios Xe Version 17.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.123
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Cisco PSIRT 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-SAP-OPLbze68
Vendor Advisory