CVE-2021-1482
MEDIUM EPSS 44.6%
Published Nov 15, 20241y ago · Modified Jun 17, 20261w ago
6.4 CVSS 3.1
Published Nov 15, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain access to sensitive information on an affected system. This vulnerability is due to insufficient authorization checks. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected system. A successful exploit could allow the attacker to bypass authorization checking and gain access to sensitive information on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality Low
Integrity Low
Availability None
Threat Intelligence
EPSS Exploit Probability
44.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 64
| Vendor | Product | Version | Range |
|---|---|---|---|
| cisco | catalyst_sd-wan_manager | 17.2.4 | any |
| cisco | catalyst_sd-wan_manager | 17.2.5 | any |
| cisco | catalyst_sd-wan_manager | 17.2.6 | any |
| cisco | catalyst_sd-wan_manager | 17.2.7 | any |
| cisco | catalyst_sd-wan_manager | 17.2.8 | any |
| cisco | catalyst_sd-wan_manager | 17.2.9 | any |
| cisco | catalyst_sd-wan_manager | 17.2.10 | any |
| cisco | catalyst_sd-wan_manager | 18.2.0 | any |
| cisco | catalyst_sd-wan_manager | 18.3.0 | any |
| cisco | catalyst_sd-wan_manager | 18.3.1 | any |
| cisco | catalyst_sd-wan_manager | 18.3.1.1 | any |
| cisco | catalyst_sd-wan_manager | 18.3.3 | any |
| cisco | catalyst_sd-wan_manager | 18.3.3.1 | any |
| cisco | catalyst_sd-wan_manager | 18.3.4 | any |
| cisco | catalyst_sd-wan_manager | 18.3.5 | any |
| cisco | catalyst_sd-wan_manager | 18.3.6 | any |
| cisco | catalyst_sd-wan_manager | 18.3.6.1 | any |
| cisco | catalyst_sd-wan_manager | 18.3.7 | any |
| cisco | catalyst_sd-wan_manager | 18.3.8 | any |
| cisco | catalyst_sd-wan_manager | 18.4.0 | any |
| cisco | catalyst_sd-wan_manager | 18.4.0.1 | any |
| cisco | catalyst_sd-wan_manager | 18.4.1 | any |
| cisco | catalyst_sd-wan_manager | 18.4.3 | any |
| cisco | catalyst_sd-wan_manager | 18.4.4 | any |
| cisco | catalyst_sd-wan_manager | 18.4.5 | any |
| cisco | catalyst_sd-wan_manager | 18.4.6 | any |
| cisco | catalyst_sd-wan_manager | 18.4.302 | any |
| cisco | catalyst_sd-wan_manager | 18.4.303 | any |
| cisco | catalyst_sd-wan_manager | 18.4.501_es | any |
| cisco | catalyst_sd-wan_manager | 19.0.0 | any |
| cisco | catalyst_sd-wan_manager | 19.0.1a | any |
| cisco | catalyst_sd-wan_manager | 19.1.0 | any |
| cisco | catalyst_sd-wan_manager | 19.2.0 | any |
| cisco | catalyst_sd-wan_manager | 19.2.1 | any |
| cisco | catalyst_sd-wan_manager | 19.2.2 | any |
| cisco | catalyst_sd-wan_manager | 19.2.3 | any |
| cisco | catalyst_sd-wan_manager | 19.2.4 | any |
| cisco | catalyst_sd-wan_manager | 19.2.4.0.1 | any |
| cisco | catalyst_sd-wan_manager | 19.2.31 | any |
| cisco | catalyst_sd-wan_manager | 19.2.32 | any |
| cisco | catalyst_sd-wan_manager | 19.2.097 | any |
| cisco | catalyst_sd-wan_manager | 19.2.098 | any |
| cisco | catalyst_sd-wan_manager | 19.2.099 | any |
| cisco | catalyst_sd-wan_manager | 19.2.929 | any |
| cisco | catalyst_sd-wan_manager | 19.3.0 | any |
| cisco | catalyst_sd-wan_manager | 20.1.1 | any |
| cisco | catalyst_sd-wan_manager | 20.1.1.1 | any |
| cisco | catalyst_sd-wan_manager | 20.1.2 | any |
| cisco | catalyst_sd-wan_manager | 20.1.2_937 | any |
| cisco | catalyst_sd-wan_manager | 20.1.12 | any |
| cisco | catalyst_sd-wan_manager | 20.3.1 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2.1 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2.1_927 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2.1_930 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2_925 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2_928 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2_929 | any |
| cisco | catalyst_sd-wan_manager | 20.3.2_937 | any |
| cisco | catalyst_sd-wan_manager | 20.3.3 | any |
| cisco | catalyst_sd-wan_manager | 20.3.3.1 | any |
| cisco | catalyst_sd-wan_manager | 20.4.1 | any |
| cisco | catalyst_sd-wan_manager | 20.4.1.0.1 | any |
| cisco | catalyst_sd-wan_manager | 20.4.1.1 | any |
References 1
- sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-auth-bypass-Z3Zze5XC
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.