Insufficiently protected credentials in Cisco Systems, Inc products - CVE-2021-1392

Vulnerability identifier: #VU51768

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-1392

CWE-ID: CWE-522

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to incorrect permissions are associated with the show cip security CLI command. A local user can use a specially crafted command to retrieve the password for CIP and reconfigure the device.

Cisco Embedded Services 3300 Series Switches
Allen-Bradley Stratix 5400 Industrial Ethernet Switches
Allen-Bradley Stratix 5410 Industrial Distribution Switches
Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches
Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches
Stratix 5800
Cisco IOS
Cisco IOS XE

Install updates from vendor's website.

Cisco IOS - addressed in versions 8.5.164.27, 8.5.171.0, 15.2(7)E4, 15.2(7.0.16j)E4, 15.2(7.1.0p)E4, 15.3.3 JF14, 16.12.4.40, 16.12.5, 16.12.5a, 17.1.3, 17.2.1.177, 17.3.0.188, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.4.0.56, 17.4.1, 17.4.1a, 17.4.1b
Cisco IOS XE - addressed in versions 8.5.164.27, 008.005(171.000), 15.2(07)E04, 15.2.7.0.16j E4, 15.2.7.1.0p E4, 15.3(03)JF14, 16.12.4.40, 16.12.5, 16.12.5a, 17.1.3, 17.2.1.177, 17.3.0.188, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.4.0.56, 17.4.1, 17.4.1a, 17.4.1b
Stratix 5800 - update to 17.04.01

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-SAP-OPLbze68

• Insufficiently protected credentials in Cisco IOS and IOS XE
• Multiple vulnerabilities in Rockwell Automation Stratix Switches