VDB
CVE-2021-1612
CVE-2021-1612
PUBLISHED
CVSS 5.5 MEDIUM
A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on an affected device.
EPSS 0.05% · 15.5th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.05%
15.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | sd-wan | 0 |
| Cisco | Cisco IOS XE SD-WAN Software | n/a |
Exploit Intelligence
Timeline
- Sep 23, 2021 EPSS Score
- Sep 23, 2021 CVE Published
- Oct 5, 2021 EPSS Score
- Oct 11, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Jan 15, 2022 EPSS Score
- Mar 14, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 10, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 26, 2022 EPSS Score