← Back

CVE-2021-1512

nvd nist
Published: May 6, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.0
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Exploitability: 0.8 / Impact: 5.2
Source: NVD

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system.

Affected (17)

12 products
Catalyst Sd Wan Manager
Sd Wan Vbond Orchestrator
Sd Wan Vmanage
Vsmart Controller Firmware
Vedge 100 Firmware
Vedge 1000 Firmware
Vedge 100b Firmware
Vedge 100m Firmware
Vedge 100wm Firmware
Vedge 2000 Firmware
Vedge 5000 Firmware
Vedge Cloud Firmware
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
From 19.2 to 19.2.3
From 20.3 to 20.3.1
From 20.4 to 20.4.1
From 20.5 to 20.5.1
All versions
Cisco
Before 18.4.6
From 20.1 to 20.1.2
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vsmart Controller
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 100
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 1000
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 100b
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 100m
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 100wm
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 2000
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 5000
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge 100b
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Vedge Cloud
All versions

Timeline

No history available yet.