PT-2021-2254 · Cisco · Cisco Sd-Wan

Published 2021-03-03 · Updated 2024-11-18 · CVE-2021-1461

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software versions (affected versions not specified)

Description: A vulnerability in the Image Signature Verification feature could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious software patch on an affected device. The issue is due to improper verification of digital signatures for patch images. An attacker could exploit this by crafting an unsigned software patch to bypass signature checks and loading it on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.

Recommendations: For all affected versions, update to the latest software version released by Cisco that addresses this issue. At the moment, there is no information about specific steps for each version, but applying the software update from Cisco is the recommended resolution.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2021-01227

CVE-2021-1461

Affected Products

Cisco Sd-Wan

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-xss-webui-gQLSFyPM · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1461 · Security Note
• https://bdu.fstec.ru/vul/2021-01227 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-sigverbypass-gPYXd6Mk · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-sigverbypass-gPYXd6Mk · Note
• https://twitter.com/CVEnew/status/1858536019693334921 · Twitter Post