CVE-2021-34723

Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability

Severity Score

6.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific CLI command parameters. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of the configuration database and gain root-level access to an affected device.

Una vulnerabilidad en un comando CLI específico que se ejecuta en Cisco IOS XE SD-WAN Software podría permitir a un atacante local autenticado sobrescribir archivos arbitrarios en la base de datos de configuración de un dispositivo afectado. Esta vulnerabilidad es debido a una comprobación insuficiente de los parámetros específicos del comando CLI. Un atacante podría explotar esta vulnerabilidad al emitir ese comando con parámetros específicos. Una explotación con éxito podría permitir al atacante sobrescribir el contenido de la base de datos de configuración y conseguir acceso a nivel de root a un dispositivo afectado

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2021-06-15 CVE Reserved
2021-09-23 CVE Published
2023-03-08 EPSS Updated
2024-09-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-668: Exposure of Resource to Wrong Sphere

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-arbfileov-MVOF3ZZn	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1000-x Search vendor "Cisco" for product "Asr 1000-x"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1001 Search vendor "Cisco" for product "Asr 1001"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1002 Search vendor "Cisco" for product "Asr 1002"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1004 Search vendor "Cisco" for product "Asr 1004"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1006 Search vendor "Cisco" for product "Asr 1006"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1013 Search vendor "Cisco" for product "Asr 1013"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Asr 1023 Search vendor "Cisco" for product "Asr 1023"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	4321 Integrated Services Router Search vendor "Cisco" for product "4321 Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	4331 Integrated Services Router Search vendor "Cisco" for product "4331 Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	4351 Integrated Services Router Search vendor "Cisco" for product "4351 Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	4431 Integrated Services Router Search vendor "Cisco" for product "4431 Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100-4g Integrated Services Router Search vendor "Cisco" for product "1100-4g Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100-4gltegb Integrated Services Router Search vendor "Cisco" for product "1100-4gltegb Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100-4gltena Integrated Services Router Search vendor "Cisco" for product "1100-4gltena Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100-6g Integrated Services Router Search vendor "Cisco" for product "1100-6g Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100-lte Integrated Services Router Search vendor "Cisco" for product "1100-lte Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	1100 Integrated Services Router Search vendor "Cisco" for product "1100 Integrated Services Router"	-	-	Safe
Cisco Search vendor "Cisco"	Ios Xe Search vendor "Cisco" for product "Ios Xe"	17.3.1a Search vendor "Cisco" for product "Ios Xe" and version "17.3.1a"	-	Affected	in	Cisco Search vendor "Cisco"	Csr1000v Search vendor "Cisco" for product "Csr1000v"	-	-	Safe