A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack.
The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco IOS XR Software
Vendor
Cisco
Product
Cisco IOS XR Software
Platforms
Unknown
Default status
Unknown
Cisco IOS XR Software · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Virtual Topology System (VTS)
Vendor
Cisco
Product
Cisco Virtual Topology System (VTS)
Platforms
Unknown
Default status
Unknown
Cisco Virtual Topology System (VTS) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Network Services Orchestrator
Vendor
Cisco
Product
Cisco Network Services Orchestrator
Platforms
Unknown
Default status
Unknown
Cisco Network Services Orchestrator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Enterprise NFV Infrastructure Software
Vendor
Cisco
Product
Cisco Enterprise NFV Infrastructure Software
Platforms
Unknown
Default status
Unknown
Cisco Enterprise NFV Infrastructure Software · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Catalyst SD-WAN
Vendor
Cisco
Product
Cisco Catalyst SD-WAN
Platforms
Unknown
Default status
Unknown
Cisco Catalyst SD-WAN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Catalyst SD-WAN Manager
Vendor
Cisco
Product
Cisco Catalyst SD-WAN Manager
Platforms
Unknown
Default status
Unknown
Cisco Catalyst SD-WAN Manager · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco IOS XE Catalyst SD-WAN
Vendor
Cisco
Product
Cisco IOS XE Catalyst SD-WAN
Platforms
Unknown
Default status
Unknown
Cisco IOS XE Catalyst SD-WAN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco SD-WAN vEdge Router
Vendor
Cisco
Product
Cisco SD-WAN vEdge Router
Platforms
Unknown
Default status
Unknown
Cisco SD-WAN vEdge Router · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Ultra Gateway Platform
Vendor
Cisco
Product
Cisco Ultra Gateway Platform
Platforms
Unknown
Default status
Unknown
Cisco Ultra Gateway Platform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
Unavailable
Unavailable
Unavailable
None listed
Cisco Carrier Packet Transport
Vendor
Cisco
Product
Cisco Carrier Packet Transport
Platforms
Unknown
Default status
Unknown
Cisco Carrier Packet Transport · Scoped product and version facts