CVE-2021-1464

MEDIUM EPSS 66.8%
Published Nov 15, 20241y ago · Modified Jun 17, 20261w ago
5.0 CVSS 3.1
Medium
Find Similar
Published Nov 15, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain restricted access to the configuration information of an affected system. This vulnerability exists because the affected software has insufficient input validation for certain commands. An attacker could exploit this vulnerability by sending crafted requests to the affected commands of an affected system. A successful exploit could allow the attacker to bypass authorization checking and gain restricted access to the configuration data of the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS Details

Base Score
5.0
Exploitability
3.1
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
66.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 42

VendorProductVersionRange
ciscocatalyst_sd-wan_manager17.2.4any
ciscocatalyst_sd-wan_manager17.2.5any
ciscocatalyst_sd-wan_manager17.2.6any
ciscocatalyst_sd-wan_manager17.2.7any
ciscocatalyst_sd-wan_manager17.2.8any
ciscocatalyst_sd-wan_manager17.2.9any
ciscocatalyst_sd-wan_manager17.2.10any
ciscocatalyst_sd-wan_manager18.2.0any
ciscocatalyst_sd-wan_manager18.3.0any
ciscocatalyst_sd-wan_manager18.3.1any
ciscocatalyst_sd-wan_manager18.3.1.1any
ciscocatalyst_sd-wan_manager18.3.3any
ciscocatalyst_sd-wan_manager18.3.3.1any
ciscocatalyst_sd-wan_manager18.3.4any
ciscocatalyst_sd-wan_manager18.3.5any
ciscocatalyst_sd-wan_manager18.3.6any
ciscocatalyst_sd-wan_manager18.3.6.1any
ciscocatalyst_sd-wan_manager18.3.7any
ciscocatalyst_sd-wan_manager18.3.8any
ciscocatalyst_sd-wan_manager18.4.0any
ciscocatalyst_sd-wan_manager18.4.0.1any
ciscocatalyst_sd-wan_manager18.4.1any
ciscocatalyst_sd-wan_manager18.4.3any
ciscocatalyst_sd-wan_manager18.4.4any
ciscocatalyst_sd-wan_manager18.4.5any
ciscocatalyst_sd-wan_manager18.4.6any
ciscocatalyst_sd-wan_manager18.4.302any
ciscocatalyst_sd-wan_manager18.4.303any
ciscocatalyst_sd-wan_manager18.4.501_esany
ciscocatalyst_sd-wan_manager19.0.0any
ciscocatalyst_sd-wan_manager19.0.1aany
ciscocatalyst_sd-wan_manager19.1.0any
ciscocatalyst_sd-wan_manager19.2.0any
ciscocatalyst_sd-wan_manager19.2.1any
ciscocatalyst_sd-wan_manager19.2.2any
ciscocatalyst_sd-wan_manager19.2.097any
ciscocatalyst_sd-wan_manager19.2.098any
ciscocatalyst_sd-wan_manager19.2.099any
ciscocatalyst_sd-wan_manager19.3.0any
ciscocatalyst_sd-wan_manager20.1.1any
ciscocatalyst_sd-wan_manager20.1.1.1any
ciscocatalyst_sd-wan_manager20.1.12any

References 9

  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-sqlinj-HDJUeEAX
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vdaemon-bo-RuzzEA2
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-auth-bypass-Z3Zze5XC
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-authorization-b-GUEpSLK
    Vendor Advisory
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHX
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-xml-ext-entity-q6Z7uVUg
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-cql-inject-c7z9QqyB
    Not Applicable
  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9Mfu
    Not Applicable

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.