CVE-2021-1513

Published: May 6, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected (14)

Products: Cisco: Catalyst Sd Wan Manager, Sd Wan Vbond Orchestrator, Vsmart Controller Firmware, Vedge 100 Firmware, Vedge 1000 Firmware, Vedge 100b Firmware, Vedge 100m Firmware, Vedge 100wm Firmware, Vedge 2000 Firmware, Vedge 5000 Firmware, Vedge Cloud Firmware

Cisco

11 products

Catalyst Sd Wan Manager

Sd Wan Vbond Orchestrator

Vsmart Controller Firmware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Catalyst Sd Wan Manager	Before 20.3.1
Cisco Catalyst Sd Wan Manager	From 20.4 to 20.4.1
Cisco Catalyst Sd Wan Manager	From 20.5 to 20.5.1
Cisco Sd Wan Vbond Orchestrator	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vsmart Controller Firmware	All versions

Running on/with	Platform Versions
Cisco Vsmart Controller	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 100 Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 1000 Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 1000	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 100b Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 100b	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 100m Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 100m	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 100wm Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 100wm	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 2000 Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 2000	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 5000 Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 5000	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge 100b Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge 100b	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Vedge Cloud Firmware	All versions

Running on/with	Platform Versions
Cisco Vedge Cloud	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dos-Ckn5cVqW

Source: psirt@cisco.com

Vendor Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dos-Ckn5cVqW

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.