CVE-2021-1403 Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability

High 7.4 Published 24 Mar 2021 Updated 8 Nov 2024

An attacker can cause a denial of service on Cisco IOS XE devices by tricking an authenticated user into following a malicious link.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2021-1403?

CVE-2021-1403 is a high-severity vulnerability in Cisco Ios Xe, published on 24 Mar 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient HTTP protections in the web UI on an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the web UI to follow a crafted link. A successful exploit could allow the attacker to corrupt memory on the affected device, forcing it to reload and causing a DoS condition.

Weakness: CWE-1021, CWE-345

Which versions are affected by CVE-2021-1403?

It affects 1 product.

Products include Cisco Ios Xe.

How do I fix CVE-2021-1403?

No fix has been published for CVE-2021-1403 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-1403 being exploited?

There is no known exploitation of CVE-2021-1403 in the wild and no public exploit code.

All Cisco Ios Xe vulnerabilities

Sources

Also known as GHSA-65hw-5pjx-qj9v.