CVE-2021-1480

Cisco SD-WAN vManage Software Vulnerabilities

Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

Cisco · Cisco SD-WAN Solution

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.79% chance of exploitation in the next 30 days, 78th percentile

Published

2021-04-08

Updated

2024-11-08

Proof-of-concept exploits (1)

• xmco/sdwan-cve-2021-14804★ · 2021-08-02

Security advisories

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-Yu…

References

• CVE Record
• NVD entry