CVE-2021-1241: Cisco SD-WAN Denial of Service Vulnerabilities
Published Jan 20, 2021
·Updated
Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
22 affected components
cisco IOS XE SD-WAN
cisco Sd-wan Firmware=18.3.5
cisco Sd-wan Firmware=18.3.8
cisco Sd-wan Firmware=18.4.1
cisco Sd-wan Firmware=18.4.4
cisco Sd-wan Firmware=18.4.5
cisco Sd-wan Firmware=19.2.0
cisco Sd-wan Firmware=19.2.1
cisco Sd-wan Firmware=19.2.2
cisco Sd-wan Firmware=19.2.99
cisco Sd-wan Firmware=20.1.0
cisco Sd-wan Vsmart Controller Firmware
cisco Vedge 100 Router
cisco Vedge 1000 Router
cisco Vedge 100b Router
cisco Vedge 100m Router
cisco Vedge 100wm Router
cisco Vedge 2000 Router
cisco Vedge 5000 Router
cisco Vedge Cloud Router
cisco Catalyst SD-WAN Manager
cisco Sd-wan Vbond Orchestrator
Event History
Jan 20, 2021
CVE Published
via MITRE·08:10 PM
Data Sourced
via MITRE·08:10 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-1241.
2
What is the severity of CVE-2021-1241?
The severity of CVE-2021-1241 is high.
3
Which Cisco products are affected by CVE-2021-1241?
Cisco SD-WAN products, specifically Cisco IOS XE SD-WAN and Cisco SD-WAN Firmware versions 18.3.5 to 20.1.0, are affected by CVE-2021-1241.
4
What is the impact of CVE-2021-1241?
CVE-2021-1241 allows an unauthenticated remote attacker to execute denial of service (DoS) attacks against an affected device.
5
Is there a fix for CVE-2021-1241?
Cisco has released patches and updates to address CVE-2021-1241. It is recommended to update to the latest version of the affected software.