Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1392

A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device.

Published

2021-03-24T20:15:14.057

Last Modified

2024-11-21T05:44:14.933

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-522
  • Type: Primary
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.0\(1\)ey Yes
Operating System cisco ios 15.0\(1\)ey1 Yes
Operating System cisco ios 15.0\(1\)ey2 Yes
Operating System cisco ios 15.1\(3\)svs Yes
Operating System cisco ios 15.1\(3\)svt1 Yes
Operating System cisco ios 15.2\(1\)ey Yes
Operating System cisco ios 15.2\(2\)e Yes
Operating System cisco ios 15.2\(2\)e1 Yes
Operating System cisco ios 15.2\(2\)e2 Yes
Operating System cisco ios 15.2\(2\)e3 Yes
Operating System cisco ios 15.2\(2\)e4 Yes
Operating System cisco ios 15.2\(2\)e5 Yes
Operating System cisco ios 15.2\(2\)e5a Yes
Operating System cisco ios 15.2\(2\)e5b Yes
Operating System cisco ios 15.2\(2\)e6 Yes
Operating System cisco ios 15.2\(2\)e7 Yes
Operating System cisco ios 15.2\(2\)e7b Yes
Operating System cisco ios 15.2\(2\)e8 Yes
Operating System cisco ios 15.2\(2\)e9 Yes
Operating System cisco ios 15.2\(2\)e10 Yes
Operating System cisco ios 15.2\(2\)ea Yes
Operating System cisco ios 15.2\(2\)ea1 Yes
Operating System cisco ios 15.2\(2\)ea2 Yes
Operating System cisco ios 15.2\(2\)ea3 Yes
Operating System cisco ios 15.2\(2\)eb Yes
Operating System cisco ios 15.2\(2\)eb1 Yes
Operating System cisco ios 15.2\(2\)eb2 Yes
Operating System cisco ios 15.2\(2a\)e2 Yes
Operating System cisco ios 15.2\(2b\)e Yes
Operating System cisco ios 15.2\(3\)e1 Yes
Operating System cisco ios 15.2\(3\)e2 Yes
Operating System cisco ios 15.2\(3\)e3 Yes
Operating System cisco ios 15.2\(3\)e4 Yes
Operating System cisco ios 15.2\(3\)e5 Yes
Operating System cisco ios 15.2\(3\)ea Yes
Operating System cisco ios 15.2\(4\)e5a Yes
Operating System cisco ios 15.2\(4\)ea Yes
Operating System cisco ios 15.2\(4\)ea1 Yes
Operating System cisco ios 15.2\(4\)ea2 Yes
Operating System cisco ios 15.2\(4\)ea3 Yes
Operating System cisco ios 15.2\(4\)ea4 Yes
Operating System cisco ios 15.2\(4\)ea5 Yes
Operating System cisco ios 15.2\(4\)ea6 Yes
Operating System cisco ios 15.2\(4\)ea7 Yes
Operating System cisco ios 15.2\(4\)ea8 Yes
Operating System cisco ios 15.2\(4\)ea9 Yes
Operating System cisco ios 15.2\(4\)ea9a Yes
Operating System cisco ios 15.2\(4\)ea10 Yes
Operating System cisco ios 15.2\(4\)ec1 Yes
Operating System cisco ios 15.2\(4\)ec2 Yes
Operating System cisco ios 15.2\(4\)jaz Yes
Operating System cisco ios 15.2\(5\)e Yes
Operating System cisco ios 15.2\(5\)e1 Yes
Operating System cisco ios 15.2\(5\)e2 Yes
Operating System cisco ios 15.2\(5\)e2b Yes
Operating System cisco ios 15.2\(5\)e2c Yes
Operating System cisco ios 15.2\(5\)ea Yes
Operating System cisco ios 15.2\(5a\)e1 Yes
Operating System cisco ios 15.2\(6\)e Yes
Operating System cisco ios 15.2\(6\)e0a Yes
Operating System cisco ios 15.2\(6\)e0c Yes
Operating System cisco ios 15.2\(6\)e1 Yes
Operating System cisco ios 15.2\(6\)e1a Yes
Operating System cisco ios 15.2\(6\)e1s Yes
Operating System cisco ios 15.2\(7\)e0b Yes
Operating System cisco ios 15.2\(7a\)e0b Yes
Operating System cisco ios 15.2\(7b\)e0b Yes
Operating System cisco ios 15.3\(3\)ja1 Yes
Operating System cisco ios 15.3\(3\)ja4 Yes
Operating System cisco ios 15.3\(3\)ja5 Yes
Operating System cisco ios 15.3\(3\)ja6 Yes
Operating System cisco ios 15.3\(3\)ja7 Yes
Operating System cisco ios 15.3\(3\)ja8 Yes
Operating System cisco ios 15.3\(3\)ja10 Yes
Operating System cisco ios 15.3\(3\)ja11 Yes
Operating System cisco ios 15.3\(3\)ja12 Yes
Operating System cisco ios 15.3\(3\)jaa Yes
Operating System cisco ios 15.3\(3\)jax Yes
Operating System cisco ios 15.3\(3\)jax1 Yes
Operating System cisco ios 15.3\(3\)jax2 Yes
Operating System cisco ios 15.3\(3\)jb Yes
Operating System cisco ios 15.3\(3\)jbb Yes
Operating System cisco ios 15.3\(3\)jbb1 Yes
Operating System cisco ios 15.3\(3\)jbb2 Yes
Operating System cisco ios 15.3\(3\)jbb4 Yes
Operating System cisco ios 15.3\(3\)jbb5 Yes
Operating System cisco ios 15.3\(3\)jbb6 Yes
Operating System cisco ios 15.3\(3\)jbb6a Yes
Operating System cisco ios 15.3\(3\)jbb8 Yes
Operating System cisco ios 15.3\(3\)jc Yes
Operating System cisco ios 15.3\(3\)jc1 Yes
Operating System cisco ios 15.3\(3\)jc2 Yes
Operating System cisco ios 15.3\(3\)jc3 Yes
Operating System cisco ios 15.3\(3\)jc4 Yes
Operating System cisco ios 15.3\(3\)jc5 Yes
Operating System cisco ios 15.3\(3\)jc6 Yes
Operating System cisco ios 15.3\(3\)jc8 Yes
Operating System cisco ios 15.3\(3\)jc9 Yes
Operating System cisco ios 15.3\(3\)jc14 Yes
Operating System cisco ios 15.3\(3\)jd Yes
Operating System cisco ios 15.3\(3\)jd2 Yes
Operating System cisco ios 15.3\(3\)jd3 Yes
Operating System cisco ios 15.3\(3\)jd4 Yes
Operating System cisco ios 15.3\(3\)jd5 Yes
Operating System cisco ios 15.3\(3\)jd6 Yes
Operating System cisco ios 15.3\(3\)jd7 Yes
Operating System cisco ios 15.3\(3\)jd8 Yes
Operating System cisco ios 15.3\(3\)jd9 Yes
Operating System cisco ios 15.3\(3\)jd11 Yes
Operating System cisco ios 15.3\(3\)jd12 Yes
Operating System cisco ios 15.3\(3\)jd13 Yes
Operating System cisco ios 15.3\(3\)jd14 Yes
Operating System cisco ios 15.3\(3\)jd16 Yes
Operating System cisco ios 15.3\(3\)jd17 Yes
Operating System cisco ios 15.3\(3\)je Yes
Operating System cisco ios 15.3\(3\)jf Yes
Operating System cisco ios 15.3\(3\)jf1 Yes
Operating System cisco ios 15.3\(3\)jf2 Yes
Operating System cisco ios 15.3\(3\)jf4 Yes
Operating System cisco ios 15.3\(3\)jf5 Yes
Operating System cisco ios 15.3\(3\)jf6 Yes
Operating System cisco ios 15.3\(3\)jf7 Yes
Operating System cisco ios 15.3\(3\)jf8 Yes
Operating System cisco ios 15.3\(3\)jf9 Yes
Operating System cisco ios 15.3\(3\)jf10 Yes
Operating System cisco ios 15.3\(3\)jf11 Yes
Operating System cisco ios 15.3\(3\)jf12 Yes
Operating System cisco ios 15.3\(3\)jf12i Yes
Operating System cisco ios 15.3\(3\)jf13 Yes
Operating System cisco ios 15.3\(3\)jg Yes
Operating System cisco ios 15.3\(3\)jg1 Yes
Operating System cisco ios 15.3\(3\)jh Yes
Operating System cisco ios 15.3\(3\)jh1 Yes
Operating System cisco ios 15.3\(3\)ji1 Yes
Operating System cisco ios 15.3\(3\)ji3 Yes
Operating System cisco ios 15.3\(3\)ji4 Yes
Operating System cisco ios 15.3\(3\)ji5 Yes
Operating System cisco ios 15.3\(3\)ji6 Yes
Operating System cisco ios 15.3\(3\)jj Yes
Operating System cisco ios 15.3\(3\)jj1 Yes
Operating System cisco ios 15.3\(3\)jk Yes
Operating System cisco ios 15.3\(3\)jk1 Yes
Operating System cisco ios 15.3\(3\)jk1t Yes
Operating System cisco ios 15.3\(3\)jk2 Yes
Operating System cisco ios 15.3\(3\)jk2a Yes
Operating System cisco ios 15.3\(3\)jk3 Yes
Operating System cisco ios 15.3\(3\)jk4 Yes
Operating System cisco ios 15.3\(3\)jn Yes
Operating System cisco ios 15.3\(3\)jn3 Yes
Operating System cisco ios 15.3\(3\)jn4 Yes
Operating System cisco ios 15.3\(3\)jn6 Yes
Operating System cisco ios 15.3\(3\)jn7 Yes
Operating System cisco ios 15.3\(3\)jn8 Yes
Operating System cisco ios 15.3\(3\)jn9 Yes
Operating System cisco ios 15.3\(3\)jn11 Yes
Operating System cisco ios 15.3\(3\)jn13 Yes
Operating System cisco ios 15.3\(3\)jn14 Yes
Operating System cisco ios 15.3\(3\)jn15 Yes
Operating System cisco ios 15.3\(3\)jnb Yes
Operating System cisco ios 15.3\(3\)jnb1 Yes
Operating System cisco ios 15.3\(3\)jnb2 Yes
Operating System cisco ios 15.3\(3\)jnb3 Yes
Operating System cisco ios 15.3\(3\)jnb4 Yes
Operating System cisco ios 15.3\(3\)jnb5 Yes
Operating System cisco ios 15.3\(3\)jnb6 Yes
Operating System cisco ios 15.3\(3\)jnc Yes
Operating System cisco ios 15.3\(3\)jnc1 Yes
Operating System cisco ios 15.3\(3\)jnc2 Yes
Operating System cisco ios 15.3\(3\)jnc3 Yes
Operating System cisco ios 15.3\(3\)jnc4 Yes
Operating System cisco ios 15.3\(3\)jnd Yes
Operating System cisco ios 15.3\(3\)jnd1 Yes
Operating System cisco ios 15.3\(3\)jnd2 Yes
Operating System cisco ios 15.3\(3\)jnd3 Yes
Operating System cisco ios 15.3\(3\)jnp Yes
Operating System cisco ios 15.3\(3\)jnp1 Yes
Operating System cisco ios 15.3\(3\)jnp3 Yes
Operating System cisco ios 15.3\(3\)jpb Yes
Operating System cisco ios 15.3\(3\)jpb1 Yes
Operating System cisco ios 15.3\(3\)jpc Yes
Operating System cisco ios 15.3\(3\)jpc1 Yes
Operating System cisco ios 15.3\(3\)jpc2 Yes
Operating System cisco ios 15.3\(3\)jpc3 Yes
Operating System cisco ios 15.3\(3\)jpc5 Yes
Operating System cisco ios 15.3\(3\)jpd Yes
Operating System cisco ios_xe 3.3.0xo Yes
Operating System cisco ios_xe 3.3.1xo Yes
Operating System cisco ios_xe 3.3.2xo Yes
Operating System cisco ios_xe 3.6.5be Yes
Operating System cisco ios_xe 3.7.4e Yes
Operating System cisco ios_xe 3.7.5e Yes
Operating System cisco ios_xe 16.9.1 Yes
Operating System cisco ios_xe 16.9.1d Yes
Operating System cisco ios_xe 16.10.1 Yes
Operating System cisco ios_xe 16.10.1e Yes
Operating System cisco ios_xe 16.11.1 Yes
Operating System cisco ios_xe 16.11.1a Yes
Operating System cisco ios_xe 16.11.1c Yes
Operating System cisco ios_xe 16.11.1s Yes
Operating System cisco ios_xe 16.11.2 Yes
Operating System cisco ios_xe 16.12.1 Yes
Operating System cisco ios_xe 16.12.1c Yes
Operating System cisco ios_xe 16.12.1s Yes
Operating System cisco ios_xe 16.12.2 Yes
Operating System cisco ios_xe 16.12.2s Yes
Operating System cisco ios_xe 16.12.2t Yes
Operating System cisco ios_xe 16.12.3 Yes
Operating System cisco ios_xe 16.12.3s Yes
Operating System cisco ios_xe 16.12.4 Yes
Operating System cisco ios_xe 17.1.1 Yes
Operating System cisco ios_xe 17.1.1s Yes
Operating System cisco ios_xe 17.1.1t Yes
Operating System cisco ios_xe 17.1.2 Yes
Operating System cisco ios_xe 17.2.1 Yes
References