VDB
CVE-2021-1484
CVE-2021-1484
PUBLISHED
CVSS 6.5 MEDIUM
A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition. This vulnerability is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this vulnerability by submitting crafted input to the device template configuration. A successful exploit could allow the attacker to cause a DoS condition on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
EPSS 1.24% · 66.6th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.24%
66.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 19.1.0, 18.3.8, 20.1.12 |
| cisco | catalyst_sd-wan_manager | 17.2.4, 17.2.5, 17.2.7 |
Timeline
- Nov 15, 2024 CVE Published
- Nov 15, 2024 PoC Published
- Nov 15, 2024 CVE Updated
- Nov 16, 2024 EPSS Score
- Dec 5, 2024 EPSS Score
- Dec 22, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Jan 27, 2025 EPSS Score
- Feb 14, 2025 EPSS Score
- Mar 3, 2025 EPSS Score
- Mar 21, 2025 EPSS Score
- Apr 8, 2025 EPSS Score