CVE-2021-1619
Kritik
Təsvir
Cisco IOS XE Software-in autentifikasiya, avtorizasiya və uçot (AAA) funksiyasındakı zəiflik, autentifikasiya olunmamış uzaq hücumçuya NETCONF və ya RESTCONF autentifikasiyasından yan keçməyə və aşağıdakılardan birini etməyə imkan verə bilər: Təsirə məruz qalan cihazın konfiqurasiyasını quraşdırmaq, dəyişdirmək və ya silmək; təsirə məruz qalan cihazda xidmətdən imtinaya (DoS) səbəb olan yaddaş korlanmasına yol açmaq. Bu zəiflik başladılmamış dəyişəndən qaynaqlanır. Hücumçu təsirə məruz qalan cihaza bir sıra NETCONF və ya RESTCONF sorğuları göndərməklə bu zəiflikdən istifadə edə bilər. Uğurlu istismar hücumçuya şəbəkə cihazının konfiqurasiyasını quraşdırmaq, dəyişdirmək və ya silmək üçün NETCONF və ya RESTCONF-dan istifadə etməyə və ya cihazda yaddaşı korlayaraq DoS yaratmağa imkan verə bilər.
CiddilikKritik
CVSS9.8
İstismar ehtimalı—
Məhsul
Cisco Ios Xe
Dərc23 sen 2021
İlk görülmə23 sen 2021
Zəiflik növüCWE-824CWE-824
Necə düzəltmək olar
İstehsalçı bildirişləri
Təsirlənən məhsullar
| Məhsul | Təsirlənən versiyalar | Düzəldildiyi versiya |
|---|---|---|
| cisco ios_xe | 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.4, 16.3.5, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3a, 16.9.3h, 16.9.3s, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1s, 16.10.2, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1za, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5b, 17.1.1, 17.1.1a, 17.1.1s, 17.1.1t, 17.1.2, 17.1.3, 17.2.1, 17.2.1a, 17.2.1r, 17.2.1v | — |
| cisco ios_xe_sd-wan | Aralıq göstərilməyib | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1d_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1d_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1f_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_4000_series_integrated_services | routers | — |
Versiyanızı yoxlayın
Məhsulu seçin və istifadə etdiyiniz versiyanı yazın; versiyanın təsirlənən aralıqda olub-olmadığını görün.
Intelligence 360 paketində
Attack Surface Management
Domenlərinizə bağlı aktivləri, onlarda işləyən texnologiyaları və məlum zəiflikləri bir siyahıda görün.