CVE-2021-1619
Kritik
Açıklama
Cisco IOS XE Software'un kimlik doğrulama, yetkilendirme ve hesaplama (AAA) işlevindeki bir güvenlik açığı, kimliği doğrulanmamış uzak bir saldırganın NETCONF veya RESTCONF kimlik doğrulamasını atlatmasına ve aşağıdakilerden birini yapmasına olanak tanıyabilir: Etkilenen bir cihazın yapılandırmasını yükleme, değiştirme veya silme Etkilenen bir cihazda hizmet reddine (DoS) yol açan bellek bozulmasına neden olma Bu güvenlik açığı, başlatılmamış bir değişkenden kaynaklanmaktadır. Bir saldırgan, etkilenen bir cihaza bir dizi NETCONF veya RESTCONF isteği göndererek bu güvenlik açığından yararlanabilir. Başarılı bir sömürü, saldırganın bir ağ cihazının yapılandırmasını yüklemek, değiştirmek veya silmek için NETCONF veya RESTCONF'u kullanmasına veya cihazda hizmet reddine yol açan bellek bozulmasına neden olmasına olanak tanıyabilir.
ÖnemKritik
CVSS9.8
İstismar olasılığı—
Ürün
Cisco Ios Xe
Yayın23 Eyl 2021
İlk görülme23 Eyl 2021
Zayıflık türüCWE-824CWE-824
Nasıl düzeltilir
Etkilenen ürünler
| Ürün | Etkilenen sürümler | Düzeltildiği sürüm |
|---|---|---|
| cisco ios_xe | 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.4, 16.3.5, 16.3.5b, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.3.10, 16.3.11, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.2, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3a, 16.9.3h, 16.9.3s, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1s, 16.10.2, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1za, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5b, 17.1.1, 17.1.1a, 17.1.1s, 17.1.1t, 17.1.2, 17.1.3, 17.2.1, 17.2.1a, 17.2.1r, 17.2.1v | — |
| cisco ios_xe_sd-wan | Aralık belirtilmemiş | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.2_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.3a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.3b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.4_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.5_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.10.6_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1d_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1d_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.11.1f_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.11.1s_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1a_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_4000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_asr_1000_series_aggregation_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_cloud_services_router_1000v | series | — |
| cisco ios_xe_sd-wan_16.12.1b_when_installed_on_integrated_services_virtual | router | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_1000_series_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_1100_series_industrial_integrated_services | routers | — |
| cisco ios_xe_sd-wan_16.12.1b1_when_installed_on_4000_series_integrated_services | routers | — |
Sürümünüzü kontrol edin
Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.
Intelligence 360 paketinde
Attack Surface Management
Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.