CVE-2021-1261
Summary
| CVE | CVE-2021-1261 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-01-20 20:15:00 UTC |
| Updated | 2023-10-06 16:24:00 UTC |
| Description | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory. |
Risk And Classification
Problem Types: CWE-77
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Catalyst Sd-wan Manager | - | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.2.0 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.3.0 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.3.8 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.4.6 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 19.2.3 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 19.2.99 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 20.1.0 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.2.0 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.3.0 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.3.8 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 18.4.6 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 19.2.3 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 19.2.99 | All | All | All |
| Operating System | Cisco | Sd-wan Firmware | 20.1.0 | All | All | All |
| Application | Cisco | Sd-wan Manager | - | All | All | All |
| Application | Cisco | Sd-wan Vbond Orchestrator | - | All | All | All |
| Application | Cisco | Sd-wan Vbond Orchestrator | - | All | All | All |
| Application | Cisco | Sd-wan Vmanage | - | All | All | All |
| Application | Cisco | Sd-wan Vmanage | - | All | All | All |
| Operating System | Cisco | Sd-wan Vsmart Controller Firmware | All | All | All | All |
| Operating System | Cisco | Sd-wan Vsmart Controller Firmware | All | All | All | All |
| Hardware | Cisco | Vedge 1000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 1000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 1000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 100b Router | - | All | All | All |
| Hardware | Cisco | Vedge 100b Router | - | All | All | All |
| Hardware | Cisco | Vedge 100b Router | - | All | All | All |
| Hardware | Cisco | Vedge 100m Router | - | All | All | All |
| Hardware | Cisco | Vedge 100m Router | - | All | All | All |
| Hardware | Cisco | Vedge 100m Router | - | All | All | All |
| Hardware | Cisco | Vedge 100wm Router | - | All | All | All |
| Hardware | Cisco | Vedge 100wm Router | - | All | All | All |
| Hardware | Cisco | Vedge 100wm Router | - | All | All | All |
| Hardware | Cisco | Vedge 100 Router | - | All | All | All |
| Hardware | Cisco | Vedge 100 Router | - | All | All | All |
| Hardware | Cisco | Vedge 100 Router | - | All | All | All |
| Hardware | Cisco | Vedge 2000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 2000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 2000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 5000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 5000 Router | - | All | All | All |
| Hardware | Cisco | Vedge 5000 Router | - | All | All | All |
| Hardware | Cisco | Vedge Cloud Router | - | All | All | All |
| Hardware | Cisco | Vedge Cloud Router | - | All | All | All |
| Hardware | Cisco | Vedge Cloud Router | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco SD-WAN Command Injection Vulnerabilities | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.