PT-2021-2971 · Cisco · Cisco Sd-Wan Vmanage

Published 2021-05-05 · Updated 2025-12-10 · CVE-2021-1234

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software (affected versions not specified)

Description A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This issue is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system, potentially allowing them to view sensitive information. The vulnerability is related to errors in privilege management.

Recommendations To resolve the issue, apply the software updates released by Cisco that address this vulnerability. At the moment, there is no information about additional mitigation measures or workarounds that address this vulnerability.

Fix

Improper Authorization

Weakness Enumeration

CWE-497

CWE-285

Related Identifiers

BDU:2021-02558

CVE-2021-1234

OPENSUSE-SU-2025:15092-1

OPENSUSE-SU-2025:20115-1

Affected Products

Cisco Sd-Wan Vmanage

References · 16

• https://osv.dev/vulnerability/openSUSE-SU-2025:20115-1 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmaninfdis3-OvdR6uu8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1234 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15092-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02558 · Security Note
• https://lists.opensuse.org/archives/list/[e-mail]/thread/DCN7O6E3P22YMNPL7E6QTRLJZEBZG3WZ · Note
• https://t.me/cvedetector/22610 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021050616 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmaninfdis3-OvdR6uu8 · Note
• https://t.me/CVEtracker/39304 · Telegram Post
• https://t.me/cveNotify/130772 · Telegram Post
• https://twitter.com/CVEnew/status/1858546024647663877 · Twitter Post
• https://suse.com/security/cve/CVE-2021-5678 · Note
• https://t.me/cvetracker/21274 · Telegram Post