CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-1506

CVSS 9.8v3.1pub. 2021-05-06upd. 2024-11-21

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Catalyst Sd Wan Manager

    APP
    Cisco
    20.4 – 20.4.1 (excl.)20.5 – 20.5.1 (excl.)

  • Cisco Sd Wan Vmanage

    APP
    Cisco
    < 20.3.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2026-20182CRITICAL10.0⚠ KEVPL ✓same product

Cisco Catalyst SD-WAN — pominięcie uwierzytelnienia z dostępem administracyjnym

CVE-2026-20127CRITICAL10.0⚠ KEVPL ✓same product

Cisco Catalyst SD-WAN — ominięcie uwierzytelnienia peering i przejęcie uprawnień

CVE-2026-20129CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w API Cisco Catalyst SD-WAN Manager

CVE-2023-20252CRITICAL9.8PL ✓same product

Cisco Catalyst SD-WAN Manager — Auth Bypass przez SAML API

CVE-2023-20214CRITICAL9.1PL ✓same product

Cisco SD-WAN vManage REST API — obejście uwierzytelnienia