CVE-2021-1385

Cisco IOx Application Environment Path Traversal Vulnerability

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the device does not properly validate URIs in IOx API requests. An attacker could exploit this vulnerability by sending a crafted API request that contains directory traversal character sequences to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system.

Una vulnerabilidad en el entorno de alojamiento de aplicaciones Cisco IOx de varias plataformas Cisco, podría permitir a un atacante remoto autenticado llevar a cabo ataques de salto de directorio y leer y escribir archivos en el sistema operativo o host subyacente. Esta vulnerabilidad ocurre porque el dispositivo no comprueba apropiadamente los URI en las peticiones de la API IOx. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición de API diseñada que contiene secuencias de caracteres de salto de directorio hacia un dispositivo afectado. Una explotación con éxito podría permitir al atacante leer o escribir archivos arbitrarios en el sistema operativo subyacente

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

Poc

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2020-11-13 CVE Reserved
2021-03-24 CVE Published
2023-06-16 EPSS Updated
2024-11-08 CVE Updated
2024-11-08 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (2)

URL	Tag	Source

URL	Date	SRC
https://github.com/orangecertcc/security-research/security/advisories/GHSA-hhfw-6cm2-v3w5	2024-11-08

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.8\(3\)m2a Search vendor "Cisco" for product "Ios" and version "15.8\(3\)m2a"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.8\(3\)m3 Search vendor "Cisco" for product "Ios" and version "15.8\(3\)m3"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.8\(3\)m4 Search vendor "Cisco" for product "Ios" and version "15.8\(3\)m4"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.8\(3\)m5 Search vendor "Cisco" for product "Ios" and version "15.8\(3\)m5"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.8\(3\)m6 Search vendor "Cisco" for product "Ios" and version "15.8\(3\)m6"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.9\(3\)m Search vendor "Cisco" for product "Ios" and version "15.9\(3\)m"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.9\(3\)m1 Search vendor "Cisco" for product "Ios" and version "15.9\(3\)m1"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.9\(3\)m2 Search vendor "Cisco" for product "Ios" and version "15.9\(3\)m2"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.9\(3\)m2a Search vendor "Cisco" for product "Ios" and version "15.9\(3\)m2a"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.9\(3\)m3 Search vendor "Cisco" for product "Ios" and version "15.9\(3\)m3"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.1 Search vendor "Cisco" for product "Ios Xe" and version "16.11.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.1a Search vendor "Cisco" for product "Ios Xe" and version "16.11.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.1b Search vendor "Cisco" for product "Ios Xe" and version "16.11.1b"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.1c Search vendor "Cisco" for product "Ios Xe" and version "16.11.1c"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.1s Search vendor "Cisco" for product "Ios Xe" and version "16.11.1s"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.11.2 Search vendor "Cisco" for product "Ios Xe" and version "16.11.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1 Search vendor "Cisco" for product "Ios Xe" and version "16.12.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1a Search vendor "Cisco" for product "Ios Xe" and version "16.12.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1c Search vendor "Cisco" for product "Ios Xe" and version "16.12.1c"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1s Search vendor "Cisco" for product "Ios Xe" and version "16.12.1s"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1t Search vendor "Cisco" for product "Ios Xe" and version "16.12.1t"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1w Search vendor "Cisco" for product "Ios Xe" and version "16.12.1w"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1x Search vendor "Cisco" for product "Ios Xe" and version "16.12.1x"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1y Search vendor "Cisco" for product "Ios Xe" and version "16.12.1y"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1z Search vendor "Cisco" for product "Ios Xe" and version "16.12.1z"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1z1 Search vendor "Cisco" for product "Ios Xe" and version "16.12.1z1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.1za Search vendor "Cisco" for product "Ios Xe" and version "16.12.1za"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.2 Search vendor "Cisco" for product "Ios Xe" and version "16.12.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.2a Search vendor "Cisco" for product "Ios Xe" and version "16.12.2a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.2s Search vendor "Cisco" for product "Ios Xe" and version "16.12.2s"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.2t Search vendor "Cisco" for product "Ios Xe" and version "16.12.2t"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.3 Search vendor "Cisco" for product "Ios Xe" and version "16.12.3"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.3a Search vendor "Cisco" for product "Ios Xe" and version "16.12.3a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.3s Search vendor "Cisco" for product "Ios Xe" and version "16.12.3s"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.4 Search vendor "Cisco" for product "Ios Xe" and version "16.12.4"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.4a Search vendor "Cisco" for product "Ios Xe" and version "16.12.4a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				16.12.5 Search vendor "Cisco" for product "Ios Xe" and version "16.12.5"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.1 Search vendor "Cisco" for product "Ios Xe" and version "17.1.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.1a Search vendor "Cisco" for product "Ios Xe" and version "17.1.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.1s Search vendor "Cisco" for product "Ios Xe" and version "17.1.1s"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.1t Search vendor "Cisco" for product "Ios Xe" and version "17.1.1t"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.2 Search vendor "Cisco" for product "Ios Xe" and version "17.1.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.1.3 Search vendor "Cisco" for product "Ios Xe" and version "17.1.3"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.2.1 Search vendor "Cisco" for product "Ios Xe" and version "17.2.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.2.1a Search vendor "Cisco" for product "Ios Xe" and version "17.2.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.2.1r Search vendor "Cisco" for product "Ios Xe" and version "17.2.1r"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.2.1v Search vendor "Cisco" for product "Ios Xe" and version "17.2.1v"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.2.2 Search vendor "Cisco" for product "Ios Xe" and version "17.2.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.1 Search vendor "Cisco" for product "Ios Xe" and version "17.3.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.1w Search vendor "Cisco" for product "Ios Xe" and version "17.3.1w"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.1x Search vendor "Cisco" for product "Ios Xe" and version "17.3.1x"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.2 Search vendor "Cisco" for product "Ios Xe" and version "17.3.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.3.2a Search vendor "Cisco" for product "Ios Xe" and version "17.3.2a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.4.1 Search vendor "Cisco" for product "Ios Xe" and version "17.4.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.4.1a Search vendor "Cisco" for product "Ios Xe" and version "17.4.1a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				17.4.1b Search vendor "Cisco" for product "Ios Xe" and version "17.4.1b"		-		Affected