CVE-2021-1528 — Vulnetix

CVE-2021-1528 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this vulnerability by invoking a privileged process in the affected system. A successful exploit could allow the attacker to perform actions with the privileges of the root user.

EPSS 0.06% · 18.1th percentile

Risk Scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.06%

18.1th percentile

Affected Products

Vendor	Product	Versions
cisco	catalyst_sd-wan_manager	20.5, 20.4
cisco	vedge_100b_firmware	20.4, 20.5, 20.4
cisco	vedge_100wm_firmware	20.4, 20.5
cisco	vedge_100m_firmware	20.5, 20.4
Cisco	Cisco SD-WAN Solution	n/a
cisco	vedge_5000_firmware	20.5, 20.4
cisco	sd-wan_vbond_orchestrator	20.5, 20.4
cisco	vedge_100_firmware	20.4, 20.5
cisco	vedge_cloud_firmware	20.5, 20.4
cisco	vsmart_controller	20.4, 20.5
cisco	vedge_1000_firmware	20.4, 20.5
cisco	vedge_2000_firmware	20.5, 20.4

Exploit Intelligence

20210602 Cisco SD-WAN Software Privilege Escalation Vulnerability (circl)

Timeline

Apr 13, 2021 CVE Published
Jun 5, 2021 EPSS Score
Aug 7, 2021 EPSS Score
Oct 7, 2021 EPSS Score
Dec 7, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Apr 8, 2022 EPSS Score
Jun 8, 2022 EPSS Score
Aug 9, 2022 EPSS Score
Oct 8, 2022 EPSS Score
Dec 8, 2022 EPSS Score

References

Open in Interactive Console →