CVE-2021-34700: Cisco SD-WAN vManage Software Information Disclosure Vulnerability
A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficiently controlled. An attacker could exploit this vulnerability by gaining unauthorized access to sensitive information on an affected system. A successful exploit could allow the attacker to create forged authentication requests and gain unauthorized access to the web UI of an affected system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2021-34700.
What is the title of this vulnerability?
The title of this vulnerability is 'A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated l…'
What is the severity of CVE-2021-34700?
The severity of CVE-2021-34700 is medium.
How does CVE-2021-34700 affect Cisco SD-WAN vManage Software?
CVE-2021-34700 allows an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system in Cisco SD-WAN vManage Software.
How can the vulnerability CVE-2021-34700 be fixed?
To fix CVE-2021-34700, it is recommended to update the affected Cisco SD-WAN vManage Software to version 20.5.1 or higher.