CVE-2021-1375

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device. These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and bypass the image verification check part of the secure boot process. For more information about these vulnerabilities, see the Details section of this advisory.

• CWE-347
• CWE-347

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5Vendor Advisory

Published

Mar 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1369A vulnerability in the REST API of Cisco Firepower Device Ma…5.4
• CVE-2021-1370A vulnerability in a CLI command of Cisco IOS XR Software fo…7.8
• CVE-2021-1371A vulnerability in the role-based access control of Cisco IO…6.6
• CVE-2021-1372A vulnerability in Cisco Webex Meetings Desktop App and Webe…5.5
• CVE-2021-1373A vulnerability in the Control and Provisioning of Wireless …8.6
• CVE-2021-1374A vulnerability in the web-based management interface of Cis…4.8
• CVE-2021-1376Multiple vulnerabilities in the fast reload feature of Cisco…6.7
• CVE-2021-1377A vulnerability in Address Resolution Protocol (ARP) managem…5.8
• CVE-2021-1378A vulnerability in the SSH service of the Cisco StarOS opera…7.5
• CVE-2021-1379Multiple vulnerabilities in the Cisco Discovery Protoco…6.5
• CVE-2021-1380Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1381A vulnerability in Cisco IOS XE Software could allow an auth…6.1