PT-2021-2263 · Cisco · Cisco Sd-Wan Vmanage

Published 2021-03-03 · Updated 2025-06-24 · CVE-2021-1470

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software (affected versions not specified)

Description: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper input validation of SQL queries to an affected system. An attacker could exploit this vulnerability by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on or return values from the vManage database or the underlying operating system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

RCE

Weakness Enumeration

CWE-89

CWE-20

Related Identifiers

BDU:2021-01251

CVE-2021-1470

Affected Products

Cisco Sd-Wan Vmanage

References · 14

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-cql-inject-c7z9QqyB · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-auth-bypass-Z3Zze5XC · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1470 · Security Note
• https://bdu.fstec.ru/vul/2021-01251 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1470 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-sqlinj-HDJUeEAX · Vendor Advisory
• https://twitter.com/transilienceai/status/1857654272629821835 · Twitter Post
• https://twitter.com/transilienceai/status/1857654257849147537 · Twitter Post
• https://twitter.com/transilienceai/status/1857654250710393267 · Twitter Post
• https://twitter.com/CVEnew/status/1857476933572788633 · Twitter Post
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-sqlinj-HDJUeEAX · Note
• https://twitter.com/transilienceai/status/1857654278371922320 · Twitter Post
• https://twitter.com/transilienceai/status/1857654266183270714 · Twitter Post
• https://t.me/cvenotify/126503 · Telegram Post