PT-2021-2545 · Cisco · Cisco Sd-Wan Vmanage

Published 2021-04-07 · Updated 2023-10-16 · CVE-2021-1479

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software (affected versions not specified)

Description: The issue is related to multiple vulnerabilities in Cisco SD-WAN vManage Software. These vulnerabilities could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. One of the vulnerabilities is associated with a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code with root privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2021-01951

CVE-2021-1479

Affected Products

Cisco Sd-Wan Vmanage

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-1479 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1479 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01951 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy · Vendor Advisory
• https://t.me/true_secator/1617 · Telegram Post
• https://t.me/cvenotify/13502 · Telegram Post
• https://t.me/cvenotify/12923 · Telegram Post
• https://t.me/true_secator/1684 · Telegram Post