CVE-2021-3540

Ivanti MobileIron Core clish Restricted Shell Escape via Argument Injection

Medium6.5EPSS 3.3%

Published: 22 Jul 2021
Updated: 17 Sept 2024
Reserved: 6 May 2021
Assigned by: rapid7

Description

By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

Scores

CVSS scores of CVE-2021-3540, by who scored it
Scored by	CVSS	Score	Vector
rapid7CNA (assigner)	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
NVDNVD · Modified	3.1	High7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 3.3% · top 11% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

CWE-88 Argument Injection or Modification (opens in a new tab)All about CWE-88 and its CVEs

Affected products

Ivanti · MobileIron Core
- affected 10.7.0.1-9 – ≤ 10.7.0.1-9
- affected 11.0.0.1-3 – ≤ 11.0.0.1-3

References (1)

https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/ (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2021-3540](https://trackcve.app/badge/CVE-2021-3540.svg)](https://trackcve.app/cve/CVE-2021-3540)

Record last updated 17 Sept 2024, 00:30 UTC.