CVE-2021-1461: Cisco SD-WAN Software Signature Verification Bypass Vulnerability
A vulnerability in the Image Signature Verification feature of Cisco SD-WAN Software could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by crafting an unsigned software patch to bypass signature checks and loading it on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.Cisco has released software updates that address the vulnerability described in this advisory. There are no workarounds that address this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1461?
CVE-2021-1461 has been rated as critical due to its potential for allowing unauthorized installation of malicious patches.
How do I fix CVE-2021-1461?
To mitigate CVE-2021-1461, ensure you upgrade to the latest version of Cisco SD-WAN Software that addresses this vulnerability.
Who is affected by CVE-2021-1461?
CVE-2021-1461 affects devices running vulnerable versions of Cisco SD-WAN Software with improperly verified image signatures.
What are the potential impacts of CVE-2021-1461?
Exploitation of CVE-2021-1461 can lead to the installation of unauthorized software patches, compromising system integrity.
Is there a workaround for CVE-2021-1461?
Currently, there are no known workarounds for CVE-2021-1461 other than applying the recommended software updates.