VDB
CVE-2021-1614
CVE-2021-1614
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.
EPSS 0.54% · 67.9th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.54%
67.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | sd-wan | 18.4.0, 19.2.0, 20.3 |
| Cisco | Cisco SD-WAN Solution | n/a |
Exploit Intelligence
Timeline
- Jul 22, 2021 CVE Published
- Jul 23, 2021 EPSS Score
- Sep 20, 2021 EPSS Score
- Nov 19, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 17, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 16, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 12, 2022 EPSS Score
- Nov 11, 2022 EPSS Score