← Back

CVE-2021-1546

nvd nist
Published: Sep 23, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an arbitrary file on the local system. A successful exploit could allow the attacker to return portions of an arbitrary file, possibly resulting in the disclosure of sensitive information.

Affected (33)

12 products
Catalyst Sd Wan Manager
Sd Wan Vbond Orchestrator
Sd Wan Vmanage
Vsmart Controller Firmware
Vedge 100 Firmware
Vedge 1000 Firmware
Vedge 100b Firmware
Vedge 100m Firmware
Vedge 100wm Firmware
Vedge 2000 Firmware
Vedge 5000 Firmware
Vedge Cloud Firmware
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.6 to 20.6.1
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
From 20.5 to 20.5.2
Configuration B
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vsmart Controller
All versions
Configuration C
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 100
All versions
Configuration D
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 1000
All versions
Configuration E
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 100b
All versions
Configuration F
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 100m
All versions
Configuration G
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 100wm
All versions
Configuration H
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 2000
All versions
Configuration I
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge 5000
All versions
Configuration J
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
From 18.4 to 20.4.2
From 20.5 to 20.5.2
From 20.6 to 20.6.1
Running on/withPlatform Versions
Cisco
Vedge Cloud
All versions

Timeline

No history available yet.