CVE-2021-1484: Cisco SD-WAN vManage Command Injection Vulnerability

Published Nov 15, 2024

Updated

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition. This vulnerability is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this vulnerability by submitting crafted input to the device template configuration. A successful exploit could allow the attacker to cause a DoS condition on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected Software

59 affected components

Cisco SD-WAN vManage Software

Cisco Catalyst SD-WAN Manager=17.2.4

Cisco Catalyst SD-WAN Manager=17.2.5

Cisco Catalyst SD-WAN Manager=17.2.6

Cisco Catalyst SD-WAN Manager=17.2.7

Cisco Catalyst SD-WAN Manager=17.2.8

Cisco Catalyst SD-WAN Manager=17.2.9

Cisco Catalyst SD-WAN Manager=17.2.10

Cisco Catalyst SD-WAN Manager=18.2.0

Cisco Catalyst SD-WAN Manager=18.3.0

Cisco Catalyst SD-WAN Manager=18.3.1

Cisco Catalyst SD-WAN Manager=18.3.1.1

Cisco Catalyst SD-WAN Manager=18.3.3

Cisco Catalyst SD-WAN Manager=18.3.3.1

Cisco Catalyst SD-WAN Manager=18.3.4

Cisco Catalyst SD-WAN Manager=18.3.5

Cisco Catalyst SD-WAN Manager=18.3.6

Cisco Catalyst SD-WAN Manager=18.3.6.1

Cisco Catalyst SD-WAN Manager=18.3.7

Cisco Catalyst SD-WAN Manager=18.3.8

Cisco Catalyst SD-WAN Manager=18.4.0

Cisco Catalyst SD-WAN Manager=18.4.0.1

Cisco Catalyst SD-WAN Manager=18.4.1

Cisco Catalyst SD-WAN Manager=18.4.3

Cisco Catalyst SD-WAN Manager=18.4.4

Cisco Catalyst SD-WAN Manager=18.4.5

Cisco Catalyst SD-WAN Manager=18.4.302

Cisco Catalyst SD-WAN Manager=18.4.303

Cisco Catalyst SD-WAN Manager=18.4.501_es

Cisco Catalyst SD-WAN Manager=19.0.0

Cisco Catalyst SD-WAN Manager=19.0.1a

Cisco Catalyst SD-WAN Manager=19.1.0

Cisco Catalyst SD-WAN Manager=19.2.0

Cisco Catalyst SD-WAN Manager=19.2.1

Cisco Catalyst SD-WAN Manager=19.2.2

Cisco Catalyst SD-WAN Manager=19.2.3

Cisco Catalyst SD-WAN Manager=19.2.4

Cisco Catalyst SD-WAN Manager=19.2.4.0.1

Cisco Catalyst SD-WAN Manager=19.2.31

Cisco Catalyst SD-WAN Manager=19.2.097

Cisco Catalyst SD-WAN Manager=19.2.098

Cisco Catalyst SD-WAN Manager=19.2.099

Cisco Catalyst SD-WAN Manager=19.2.929

Cisco Catalyst SD-WAN Manager=19.3.0

Cisco Catalyst SD-WAN Manager=20.1.1

Cisco Catalyst SD-WAN Manager=20.1.1.1

Cisco Catalyst SD-WAN Manager=20.1.2

Cisco Catalyst SD-WAN Manager=20.1.12

Cisco Catalyst SD-WAN Manager=20.3.1

Cisco Catalyst SD-WAN Manager=20.3.2

Cisco Catalyst SD-WAN Manager=20.3.2.1

Cisco Catalyst SD-WAN Manager=20.3.2.1_927

Cisco Catalyst SD-WAN Manager=20.3.2.1_930

Cisco Catalyst SD-WAN Manager=20.3.2_928

Cisco Catalyst SD-WAN Manager=20.3.2_929

Cisco Catalyst SD-WAN Manager=20.3.3

Cisco Catalyst SD-WAN Manager=20.4.1

Cisco Catalyst SD-WAN Manager=20.4.1.0.1

Cisco Catalyst SD-WAN Manager=20.4.1.1

Event History

Nov 15, 2024

CVE Published

via MITRE·04:26 PM

Data Sourced

via MITRE·04:26 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-1484?

CVE-2021-1484 has been rated as a high severity vulnerability due to its potential to allow remote command injection.

How do I fix CVE-2021-1484?

To mitigate CVE-2021-1484, it is recommended to update the Cisco SD-WAN vManage Software to the latest version provided by Cisco.

What types of systems are affected by CVE-2021-1484?

CVE-2021-1484 affects systems running Cisco SD-WAN vManage Software that have improper input validation.

Can CVE-2021-1484 lead to a denial of service?

Yes, CVE-2021-1484 can lead to a denial of service condition if exploited by an authenticated attacker.

Are there any known workarounds for CVE-2021-1484?

There are no official workarounds for CVE-2021-1484; applying software updates is the recommended approach.