Privilege escalation in Cisco 1100 Integrated Services Router
CVE-2021-1371
A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An attacker could exploit this vulnerability by connecting to the console port and authenticating as a read-only user. A successful exploit could allow a user with read-only permissions to access administrative privileges.
Vulnerability class: Privilege Escalation
EPSS: 0.003 (17.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco 1100_integrated_services_router
- Cisco 1101_integrated_services_router
- Cisco 1109_integrated_services_router
- Cisco 1111x_integrated_services_router
- Cisco 111x_integrated_services_router
- Cisco 1120_integrated_services_router
- Cisco 1160_integrated_services_router
- Cisco 4221_integrated_services_router
- Cisco 4321_integrated_services_router
- Cisco 4331_integrated_services_router
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-1371?
- CVE-2021-1371 is a medium-severity vulnerability in Cisco 1100 Integrated Services Router, classified under Improper Privilege Management. CVSS score: 6.6/10. Published 2021-03-24.
- How severe is CVE-2021-1371?
- Medium severity. CVSS v3 base score is 6.6 out of 10.