Cisco IOS XE 17.5.0
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:ios_xe:17.5.0:*:*:*:*:*:*:*
part: o version: 17.5.0 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Ios Xe (e06dcf6a-4e40-54fa-8931-59bc15e7d5ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-1384 |
vulnerable | 2026-06-08 05:28:13.658918 |
Cisco IOx for IOS XE Software Command Injection Vulnerability
MEDIUM (6.5)
A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages loaded onto IOx. An attacker could exploit this vulnerability by creating a crafted application .tar file and loading it onto the device. A successful exploit could allow the attacker to perform command injection into the underlying operating system as the root user.
Published: 2021-03-24T20:07:36.616Z
Updated: 2024-11-08T17:54:05.769Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.