PT-2021-2544 · Cisco · Cisco Sd-Wan Vmanage

Published 2021-04-07 · Updated 2023-10-16 · CVE-2021-1480

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software (affected versions not specified)

Description: The issue is related to errors in access control, which could allow an attacker to overwrite arbitrary files or execute arbitrary code. An unauthenticated, remote attacker may be able to execute arbitrary code, or an authenticated, local attacker may be able to gain escalated privileges on an affected system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

RCE

Weakness Enumeration

CWE-250

CWE-119

CWE-20

Related Identifiers

BDU:2021-01950

CVE-2021-1480

Affected Products

Cisco Sd-Wan Vmanage

References · 8

• 🔥 https://github.com/xmco/sdwan-cve-2021-1480 · Exploit
• https://osv.dev/vulnerability/CVE-2021-1480 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01950 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1480 · Security Note
• https://t.me/cvenotify/13503 · Telegram Post
• https://t.me/cvenotify/12892 · Telegram Post
• https://t.me/cvenotify/12909 · Telegram Post