Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-1593— Cisco Packet Tracer for Windows DLL Injection Vulnerability

Quick assessment

Affected
Cisco Cisco Packet Tracer
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Packet Tracer是美国思科（Cisco）公司的Cisco Packet Tracer 是思科打造的一款强大的网络模拟工具，可为用户提供真实操作经验。您可以通过它练习使用路由器、交换机和其他各种设备构建简单或复杂的网络，或者尝试为智慧城市、家庭和企业设计互联解决方案。 Cisco Packet Tracer 在Windows上存在代码问题漏洞，该漏洞源于运行时对目录路径的处理不正确。该漏洞可能允许经过身份验证的本地攻击者对受影响的设备执行 DLL 注入攻击。

CVSS 7.3 · High EPSS 0.32% · P22
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-1593

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Packet Tracer for Windows DLL Injection Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path on the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow an attacker with normal user privileges to execute arbitrary code on the affected system with the privileges of another user’s account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Packet Tracer代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Packet Tracer是美国思科（Cisco）公司的Cisco Packet Tracer 是思科打造的一款强大的网络模拟工具，可为用户提供真实操作经验。您可以通过它练习使用路由器、交换机和其他各种设备构建简单或复杂的网络，或者尝试为智慧城市、家庭和企业设计互联解决方案。 Cisco Packet Tracer 在Windows上存在代码问题漏洞，该漏洞源于运行时对目录路径的处理不正确。该漏洞可能允许经过身份验证的本地攻击者对受影响的设备执行 DLL 注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco Packet Tracer n/a -

II. Public POCs for CVE-2021-1593

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-1593

请登录查看更多情报信息。

Vendor Advisories for CVE-2021-1593 (1)

Same Patch Batch · Cisco · 2021-08-04 · 7 CVEs total

CVE-2021-1610 9.8 CRITICAL Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnera
CVE-2021-1609 9.8 CRITICAL Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnera
CVE-2021-1602 8.2 HIGH Cisco Small Business RV160 and RV260 Series VPN Routers Remote Command Execution Vulnerabi
CVE-2021-1572 7.8 HIGH ConfD CLI Secure Shell Server Privilege Escalation Vulnerability
CVE-2021-34707 6.5 MEDIUM Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability
CVE-2021-1522 4.3 MEDIUM Cisco Connected Mobile Experiences Strong Authentication Requirements Enforcement Bypass

IV. Related Vulnerabilities

Same vendor: Cisco
Same weakness: CWE-427

V. Comments for CVE-2021-1593

No comments yet

Leave a comment