PT-2021-5069 · Cisco · Cisco Sd-Wan

Akhil Reddy + 1 · Published 2021-09-22 · Updated 2023-10-16 · CVE-2021-1546

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software (affected versions not specified)

Description A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This issue is due to improper protections on file access through the CLI. An attacker could exploit this by running a CLI command that targets an arbitrary file on the local system, potentially disclosing sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

BDU:2021-05849

CVE-2021-1546

Affected Products

Cisco Sd-Wan

References · 8

• https://bdu.fstec.ru/vul/2021-05849 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1546 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-Fhqh8pKX · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1546 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-Fhqh8pKX?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20SD-WAN%20Software%20Information%20Disclosure%20Vulnerability&vs_k=1 · Note
• https://t.me/cibsecurity/29263 · Telegram Post
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-Fhqh8pKX?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20SD-WAN%20Software%20Information%20Disclosure%20Vulnerability&vs_k=1 · Note
• https://t.me/cvenotify/21689 · Telegram Post