CVE-2021-1301 — Vulnetix

CVE-2021-1301 PUBLISHED CVSS 9.800000190734863 CRITICAL

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

EPSS 0.88% · 75.7th percentile

Risk Scores

CVSS 3.0

9.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.88%

75.7th percentile

Affected Products

Vendor	Product	Versions
cisco	ios_xe_sd-wan
cisco	catalyst_sd-wan_manager
cisco	sd-wan_firmware	19.2.99, 19.2.1, 18.4.4
cisco	sd-wan_vbond_orchestrator
cisco	sd-wan_vsmart_controller_firmware
Cisco	Cisco SD-WAN Solution	n/a

Exploit Intelligence

20210120 Cisco SD-WAN Buffer Overflow Vulnerabilities (circl)

Timeline

Jan 20, 2021 CVE Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

Open in Interactive Console →