CVE-2021-1593 (CNNVD-202108-379)
中文标题:
Cisco Packet Tracer代码问题漏洞
英文标题:
Cisco Packet Tracer for Windows DLL Injection Vulnerability
漏洞描述
中文描述:
Cisco Packet Tracer是美国思科（Cisco）公司的Cisco Packet Tracer 是思科打造的一款强大的网络模拟工具，可为用户提供真实操作经验。您可以通过它练习使用路由器、交换机和其他各种设备构建简单或复杂的网络，或者尝试为智慧城市、家庭和企业设计互联解决方案。 Cisco Packet Tracer 在Windows上存在代码问题漏洞，该漏洞源于运行时对目录路径的处理不正确。该漏洞可能允许经过身份验证的本地攻击者对受影响的设备执行 DLL 注入攻击。
英文描述:
A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path on the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow an attacker with normal user privileges to execute arbitrary code on the affected system with the privileges of another user’s account.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Packet Tracer | n/a | - | - |
cpe:2.3:a:cisco:cisco_packet_tracer:n_a:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 7.2.0 | - | - |
cpe:2.3:a:cisco:packet_tracer:7.2.0:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 7.2.1 | - | - |
cpe:2.3:a:cisco:packet_tracer:7.2.1:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 7.2.2 | - | - |
cpe:2.3:a:cisco:packet_tracer:7.2.2:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 7.3.0 | - | - |
cpe:2.3:a:cisco:packet_tracer:7.3.0:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 7.3.1 | - | - |
cpe:2.3:a:cisco:packet_tracer:7.3.1:*:*:*:*:*:*:*
|
| cisco | packet_tracer | 8.0 | - | - |
cpe:2.3:a:cisco:packet_tracer:8.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2021-1593 |
2025-11-11 15:20:46 | 2025-11-11 07:36:33 |
| NVD | nvd_CVE-2021-1593 |
2025-11-11 14:57:40 | 2025-11-11 07:44:55 |
| CNNVD | cnnvd_CNNVD-202108-379 |
2025-11-11 15:10:41 | 2025-11-11 07:56:53 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 代码问题
- cnnvd_id: 未提取 -> CNNVD-202108-379
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 7
- data_sources: ['cve'] -> ['cve', 'nvd']