title: Cisco IOS XE Software Arbitrary File Upload Vulnerability
description: A vulnerability in the web UI framework of Cisco IOS XE Software could allow an authenticated, remote attacker to make unauthorized changes to the filesystem of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the device. An exploit could allow the attacker to gain elevated privileges on the affected device.
problem types: CWE-20
affected:
{
product: Cisco IOS XE Software
vendor: Cisco
versions:
status: affected, version: 16.2.1
status: affected, version: 16.2.2
status: affected, version: 16.3.1
status: affected, version: 16.3.2
status: affected, version: 16.3.3
status: affected, version: 16.3.1a
status: affected, version: 16.3.4
status: affected, version: 16.3.5
status: affected, version: 16.3.5b
status: affected, version: 16.3.6
status: affected, version: 16.4.1
status: affected, version: 16.4.2
status: affected, version: 16.4.3
status: affected, version: 16.5.1
status: affected, version: 16.5.1a
status: affected, version: 16.5.1b
status: affected, version: 16.5.2
status: affected, version: 16.5.3
status: affected, version: 16.6.1
status: affected, version: 16.6.2
status: affected, version: 16.6.3
status: affected, version: 16.7.1
status: affected, version: 16.7.1a
status: affected, version: 16.7.1b
status: affected, version: 16.8.1
status: affected, version: 16.8.1a
status: affected, version: 16.8.1b
status: affected, version: 16.8.1s
status: affected, version: 16.8.1c
status: affected, version: 16.8.1d
status: affected, version: 16.8.1e
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.0
]
exploits: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.