CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-1301

CVSS 9.8v3.1pub. 2021-01-20upd. 2024-11-21

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Catalyst Sd Wan Manager

    APP
    Cisco
    all versions

  • Cisco IOS Xe Sd Wan

    OS
    Cisco
    all versions

  • Cisco Sd Wan Firmware

    OS
    Cisco
    18.3.818.4.419.2.119.2.99

  • Cisco Sd Wan Vbond Orchestrator

    APP
    Cisco
    all versions

  • Cisco Sd Wan Vsmart Controller Firmware

    OS
    Cisco
    all versions

  • Cisco Vedge 1000 Router

    HW
    Cisco
    all versions

  • Cisco Vedge 100b Router

    HW
    Cisco
    all versions

  • Cisco Vedge 100m Router

    HW
    Cisco
    all versions

  • Cisco Vedge 100 Router

    HW
    Cisco
    all versions

  • Cisco Vedge 100wm Router

    HW
    Cisco
    all versions

  • Cisco Vedge 2000 Router

    HW
    Cisco
    all versions

  • Cisco Vedge 5000 Router

    HW
    Cisco
    all versions

  • Cisco Vedge Cloud Router

    HW
    Cisco
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-20182CRITICAL10.0⚠ KEVPL ✓same product

Cisco Catalyst SD-WAN — pominięcie uwierzytelnienia z dostępem administracyjnym

CVE-2026-20127CRITICAL10.0⚠ KEVPL ✓same product

Cisco Catalyst SD-WAN — ominięcie uwierzytelnienia peering i przejęcie uprawnień

CVE-2026-20129CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w API Cisco Catalyst SD-WAN Manager

CVE-2023-20252CRITICAL9.8PL ✓same product

Cisco Catalyst SD-WAN Manager — Auth Bypass przez SAML API

CVE-2023-20214CRITICAL9.1PL ✓same product

Cisco SD-WAN vManage REST API — obejście uwierzytelnienia