CVE-2021-1479: Cisco SD-WAN vManage Software Vulnerabilities
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this security advisory?
The vulnerability ID of this security advisory is CVE-2021-1479.
What is the severity of CVE-2021-1479?
The severity of CVE-2021-1479 is critical with a CVSS score of 9.8.
What is the affected software?
The affected software includes Cisco Catalyst SD-WAN Manager, Cisco SD-WAN vManage versions up to 19.2.4, and Cisco SD-WAN vManage versions between 19.3 and 20.3.3.
What are the potential impacts of this vulnerability?
The potential impacts of CVE-2021-1479 include remote code execution by an unauthenticated attacker and privilege escalation by a local attacker.
Where can I find more information about this vulnerability?
For more information about CVE-2021-1479, you can refer to the Cisco Security Advisory: [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy)