Vulnerability · Published Apr 8, 2021 · Assigned by cisco

CVE-2021-1480Cisco SD-WAN vManage Software Vulnerabilities

High 7.8

In plain English

A high-severity memory corruption in Cisco SD-WAN Solution from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)1.8%top 21.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco SD-WAN Solution	n/a

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

20210407 Cisco SD-WAN vManage Software Vulnerabilities vendor-advisory, x_refsource_CISCO