CVE-2021-1441
Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
Severity Score
6.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is due to incorrect validations of parameters passed to a diagnostic script that is executed when the device boots up. An attacker could exploit this vulnerability by tampering with an executable file stored on a device. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affected device. To exploit this vulnerability, the attacker would need administrative level credentials (level 15) on the device.
Una vulnerabilidad en las rutinas de inicialización de hardware del Software Cisco IOS XE para los Enrutadores Cisco 1100 Series Industrial Integrated Services y los Enrutadores Cisco ESR6300 Embedded Series, podría permitir a un atacante local autenticado ejecutar código sin firmar en el momento del inicio del sistema. Esta vulnerabilidad es debido a comprobaciones incorrectas de parámetros pasados ??a un script de diagnóstico que se ejecuta cuando se inicia el dispositivo. Un atacante podría explotar esta vulnerabilidad al manipular un archivo ejecutable almacenado en un dispositivo. Una explotación con éxito podría permitir al atacante ejecutar código sin firmar en el momento del arranque y omitir la comprobación de la imagen del software como parte del proceso de arranque seguro de un dispositivo afectado. Para explotar esta vulnerabilidad, el atacante necesitaría credenciales de nivel administrativo (nivel 15) en el dispositivo
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2021-03-24 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.15.1xbs Search vendor "Cisco" for product "Ios Xe" and version "3.15.1xbs" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.15.1xbs Search vendor "Cisco" for product "Ios Xe" and version "3.15.1xbs" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.15.2xbs Search vendor "Cisco" for product "Ios Xe" and version "3.15.2xbs" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.15.2xbs Search vendor "Cisco" for product "Ios Xe" and version "3.15.2xbs" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.9.1 Search vendor "Cisco" for product "Ios Xe" and version "16.9.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.9.1 Search vendor "Cisco" for product "Ios Xe" and version "16.9.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.9.1c Search vendor "Cisco" for product "Ios Xe" and version "16.9.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.9.1c Search vendor "Cisco" for product "Ios Xe" and version "16.9.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.10.1 Search vendor "Cisco" for product "Ios Xe" and version "16.10.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.10.1e Search vendor "Cisco" for product "Ios Xe" and version "16.10.1e" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.10.1e Search vendor "Cisco" for product "Ios Xe" and version "16.10.1e" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1 Search vendor "Cisco" for product "Ios Xe" and version "16.11.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1 Search vendor "Cisco" for product "Ios Xe" and version "16.11.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1c Search vendor "Cisco" for product "Ios Xe" and version "16.11.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1c Search vendor "Cisco" for product "Ios Xe" and version "16.11.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1s Search vendor "Cisco" for product "Ios Xe" and version "16.11.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.11.1s Search vendor "Cisco" for product "Ios Xe" and version "16.11.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1 Search vendor "Cisco" for product "Ios Xe" and version "16.12.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1 Search vendor "Cisco" for product "Ios Xe" and version "16.12.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1c Search vendor "Cisco" for product "Ios Xe" and version "16.12.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1c Search vendor "Cisco" for product "Ios Xe" and version "16.12.1c" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1s Search vendor "Cisco" for product "Ios Xe" and version "16.12.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1s Search vendor "Cisco" for product "Ios Xe" and version "16.12.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1za Search vendor "Cisco" for product "Ios Xe" and version "16.12.1za" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.1za Search vendor "Cisco" for product "Ios Xe" and version "16.12.1za" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2 Search vendor "Cisco" for product "Ios Xe" and version "16.12.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2 Search vendor "Cisco" for product "Ios Xe" and version "16.12.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2s Search vendor "Cisco" for product "Ios Xe" and version "16.12.2s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2s Search vendor "Cisco" for product "Ios Xe" and version "16.12.2s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2t Search vendor "Cisco" for product "Ios Xe" and version "16.12.2t" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.2t Search vendor "Cisco" for product "Ios Xe" and version "16.12.2t" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.3 Search vendor "Cisco" for product "Ios Xe" and version "16.12.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.3 Search vendor "Cisco" for product "Ios Xe" and version "16.12.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.3s Search vendor "Cisco" for product "Ios Xe" and version "16.12.3s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.3s Search vendor "Cisco" for product "Ios Xe" and version "16.12.3s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.4 Search vendor "Cisco" for product "Ios Xe" and version "16.12.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 16.12.4 Search vendor "Cisco" for product "Ios Xe" and version "16.12.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1 Search vendor "Cisco" for product "Ios Xe" and version "17.1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1 Search vendor "Cisco" for product "Ios Xe" and version "17.1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1s Search vendor "Cisco" for product "Ios Xe" and version "17.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1s Search vendor "Cisco" for product "Ios Xe" and version "17.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1t Search vendor "Cisco" for product "Ios Xe" and version "17.1.1t" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.1t Search vendor "Cisco" for product "Ios Xe" and version "17.1.1t" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.2 Search vendor "Cisco" for product "Ios Xe" and version "17.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.1.2 Search vendor "Cisco" for product "Ios Xe" and version "17.1.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1 Search vendor "Cisco" for product "Ios Xe" and version "17.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1 Search vendor "Cisco" for product "Ios Xe" and version "17.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1r Search vendor "Cisco" for product "Ios Xe" and version "17.2.1r" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1r Search vendor "Cisco" for product "Ios Xe" and version "17.2.1r" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1v Search vendor "Cisco" for product "Ios Xe" and version "17.2.1v" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.1v Search vendor "Cisco" for product "Ios Xe" and version "17.2.1v" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.3 Search vendor "Cisco" for product "Ios Xe" and version "17.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Esr6300 Search vendor "Cisco" for product "Esr6300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 17.2.3 Search vendor "Cisco" for product "Ios Xe" and version "17.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ir1101 Search vendor "Cisco" for product "Ir1101" | - | - |
Safe
|