CVE-2021-1512

lowPriorität · verfolgen · 24EPSS 0.002 · 14. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.23% (14th) EPSS

CVSS 3.6 · low

Is it mine?

29 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · bewertet 2026-10-27

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco Catalyst SD-WANcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Catalyst SD-WAN Managercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco SD-WAN vContainercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco SD-WAN vEdge Cloudcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco SD-WAN vEdge Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.6–6

v2.03.6lowAV:L/AC:L/Au:N/C:N/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 4.9

v3.16mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 0.8 · Auswirkung 5.2

v3.04.4mediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Nsecondary · ENISA EU

v3.04.4mediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Nsecondary · psirt@cisco.com USAusnutzbarkeit 0.8 · Auswirkung 3.6

v3.04.4mediumCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Nsecondary · Cisco PSIRT US

v3.14.4mediumAV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-552USCWE-552US

betroffene Produkte (29)

Betroffene Produkte und Versionsbereiche.

Cisco Cisco Catalyst SD-WANalle Versionencisco_csafUS
Cisco Cisco Catalyst SD-WAN Manageralle Versionencisco_csafUS
Cisco Cisco SD-WAN vContaineralle Versionencisco_csafUS
Cisco Cisco SD-WAN vEdge Cloudalle Versionencisco_csafUS
Cisco Cisco SD-WAN vEdge Routeralle Versionencisco_csafUS
Cisco Cisco SD-WAN Solution≤ n/aenisa_euvdEU
Cisco Systems Inc. Cisco SD-WAN≤ 18.4.6fstec_bduRU
Cisco Systems Inc. Cisco SD-WAN19.2 → 19.2.3fstec_bduRU
Cisco Systems Inc. Cisco SD-WAN20.1 → 20.1.2fstec_bduRU
Cisco Systems Inc. Cisco SD-WAN20.3 → 20.3.1fstec_bduRU
Cisco Systems Inc. Cisco SD-WAN20.4 → 20.4.1fstec_bduRU
Cisco Systems Inc. Cisco SD-WAN20.5 → 20.5.1fstec_bduRU
cisco catalyst sd-wan manager19.2 → 19.2.3nvdUScpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
cisco catalyst sd-wan manager20.3 → 20.3.1nvdUScpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
cisco catalyst sd-wan manager20.4 → 20.4.1nvdUScpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
cisco catalyst sd-wan manager20.5 → 20.5.1nvdUScpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
cisco sd-wan vbond orchestratoralle VersionennvdUScpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
cisco sd-wan vmanage< 18.4.6nvdUScpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*
cisco sd-wan vmanage20.1 → 20.1.2nvdUScpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*
cisco vedge 100 firmwarealle VersionennvdUScpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*

20 von 29 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-sdwan-arbfile-7Qhd9mCnCisco SD-WAN Software Arbitrary File Corruption Vulnerability2021-05-05csaf · cisco_csafUS
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfile-7Qhd9mCn ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfile-7Qhd9mCn"]

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisco_csaf nvd NVD CVE.org MITRE

veröffentlicht 2021-05-06geändert 2026-06-17

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan