PT-2021-3749 · Cisco · Cisco Sd-Wan+1

Joseph Connor · Published 2021-07-21 · Updated 2021-08-03 · CVE-2021-1614

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software (affected versions not specified) Cisco SD-WAN vManage Software (affected versions not specified)

Description A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This issue is due to insufficient handling of malformed MPLS packets. An attacker could exploit this by sending a crafted MPLS packet to an affected device. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.

Recommendations For Cisco SD-WAN Software, consider disabling the MPLS packet handling function until a patch is available. For Cisco SD-WAN vManage Software, restrict access to the MPLS buffer memory to minimize the risk of exploitation. As a temporary workaround, avoid using the vulnerable MPLS packet handling function in the affected software until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

BDU:2021-04003

CVE-2021-1614

Affected Products

Cisco Sd-Wan

Cisco Sd-Wan Vmanage

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-mpls-infodisclos-MSSRFkZq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1614 · Security Note
• https://bdu.fstec.ru/vul/2021-04003 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1614 · Vendor Advisory
• https://t.me/cibsecurity/26409 · Telegram Post