CVE-2021-34727
Summary
| CVE | CVE-2021-34727 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-09-23 03:15:00 UTC |
| Updated | 2023-11-07 03:36:00 UTC |
| Description | A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. A successful exploit could allow the attacker to cause a buffer overflow and possibly execute arbitrary commands with root-level privileges, or cause the device to reload, which could result in a denial of service condition. |
Risk And Classification
Problem Types: CWE-120
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 1000 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4g/6g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-2p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1120 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1160 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4000 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4221 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 422 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4321 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4331 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4351 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4431 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451-x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4461 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | Asr 1000 | - | All | All | All |
| Hardware | Cisco | Asr 1000-esp100 | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1000 Series | - | All | All | All |
| Hardware | Cisco | Asr 1000 Series Route Processor Rp2 | - | All | All | All |
| Hardware | Cisco | Asr 1000 Series Route Processor Rp3 | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001-hx | - | All | All | All |
| Hardware | Cisco | Asr 1001-hx R | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1001-x R | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002-hx | - | All | All | All |
| Hardware | Cisco | Asr 1002-hx R | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1002-x R | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1006-x | - | All | All | All |
| Hardware | Cisco | Asr 1009-x | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Asr 1023 | - | All | All | All |
| Hardware | Cisco | Csr 1000v | - | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | - | All | All | All |
| Hardware | Cisco | Isr 1000 | - | All | All | All |
| Hardware | Cisco | Isr 1100 | - | All | All | All |
| Hardware | Cisco | Isr 1100-4g/6g | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Isr 4000 | - | All | All | All |
| Hardware | Cisco | Isr 422 | - | All | All | All |
| Hardware | Cisco | Isr 4221 | - | All | All | All |
| Hardware | Cisco | Isr 4321 | - | All | All | All |
| Hardware | Cisco | Isr 4331 | - | All | All | All |
| Hardware | Cisco | Isr 4351 | - | All | All | All |
| Hardware | Cisco | Isr 4431 | - | All | All | All |
| Hardware | Cisco | Isr 4451 | - | All | All | All |
| Hardware | Cisco | Isr 4451-x | - | All | All | All |
| Hardware | Cisco | Isr 4461 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability | CISCO | tools.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 317124 Cisco Internetwork Operating System (IOS) XE SD-WAN Software Buffer Overflow Vulnerability (cisco-sa-iosxesdwan-rbuffover-vE2OB6tp)