CVE-2021-1434

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of any arbitrary file that resides on the underlying host file system.

• CWE-552

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-arbfile-FUxskKDEVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-arbfile-FUxskKDEVendor Advisory

Published

Mar 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1428Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1429Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1430Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1431A vulnerability in the vDaemon process of Cisco IOS XE SD-WA…7.5
• CVE-2021-1432A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…7.3
• CVE-2021-1433A vulnerability in the vDaemon process in Cisco IOS XE SD-WA…8.1
• CVE-2021-1435A vulnerability in the web UI of Cisco IOS XE Software could…7.2
• CVE-2021-1436A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…4.4
• CVE-2021-1437A vulnerability in the FlexConnect Upgrade feature of Cisco …7.5
• CVE-2021-1438A vulnerability in Cisco Wide Area Application Services (WAA…5.5
• CVE-2021-1439A vulnerability in the multicast DNS (mDNS) gateway feature …7.4
• CVE-2021-1440A vulnerability in the implementation of the Resource Public…6.8