CVE-2021-1465: Input Validation
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1465?
CVE-2021-1465 is considered a high-severity vulnerability due to its potential impact on sensitive file access.
How do I fix CVE-2021-1465?
To mitigate CVE-2021-1465, update your Cisco SD-WAN vManage Software to the latest version that includes security patches.
Who is affected by CVE-2021-1465?
CVE-2021-1465 affects users of Cisco SD-WAN vManage Software with specific configurations that are vulnerable to directory traversal.
What type of attack is facilitated by CVE-2021-1465?
CVE-2021-1465 allows for directory traversal attacks, enabling attackers to read sensitive files on the server.
Is authentication required to exploit CVE-2021-1465?
Yes, CVE-2021-1465 requires an authenticated remote attacker to exploit the vulnerability.