Auth Bypass in Cisco SDWAN vManage (CVE-2021-1464)
CVE-2021-1464 Published on November 15, 2024

Cisco SD-WAN vManage Authorization Bypass Vulnerability
A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and gain restricted access to the configuration information of an affected system. This vulnerability exists because the affected software has insufficient input validation for certain commands. An attacker could exploit this vulnerability by sending crafted requests to the affected commands of an affected system. A successful exploit could allow the attacker to bypass authorization checking and gain restricted access to the configuration data of the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

NVD

Vulnerability Analysis

CVE-2021-1464 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.


Products Associated with CVE-2021-1464

stack.watch emails you whenever new vulnerabilities are published in Cisco Catalyst Sd Wan Manager or Cisco Sd Wan Vmanage. Just hit a watch button to start following.

Cisco Catalyst Sd Wan Manager
 
Cisco Sd Wan Vmanage
 

Affected Versions

Cisco Catalyst SD-WAN Manager:

Exploit Probability

EPSS
0.19%
Percentile
40.45%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.