cisco-sa-sdwan-buffover-MWGucjtO: Cisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities

Q: What is the severity of cisco-sa-sdwan-buffover-MWGucjtO?

The severity of cisco-sa-sdwan-buffover-MWGucjtO is critical due to the potential for arbitrary code execution and denial of service.

Q: How do I fix cisco-sa-sdwan-buffover-MWGucjtO?

To fix cisco-sa-sdwan-buffover-MWGucjtO, upgrade to the latest versions of Cisco SD-WAN vEdge Software that are not affected.

Q: What are the affected versions of Cisco SD-WAN vEdge Software for cisco-sa-sdwan-buffover-MWGucjtO?

Affected versions include Cisco SD-WAN vEdge Software versions 20.5.1, 20.4.1, 20.3.4, and several earlier versions.

Q: Can cisco-sa-sdwan-buffover-MWGucjtO lead to data breaches?

Yes, if exploited, cisco-sa-sdwan-buffover-MWGucjtO could lead to unauthorized access and potential data breaches.

Q: Is there a workaround for cisco-sa-sdwan-buffover-MWGucjtO?

There are no recommended workarounds for cisco-sa-sdwan-buffover-MWGucjtO apart from applying the updates.

Published May 5, 2021

Updated

Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO

Credit

CVE-2021-1509(the Cisco Advanced Security Initiatives Group), CVE-2021-1510: These vulnerabilities were found by James Spadaro(the Cisco Advanced Security Initiatives Group), CVE-2021-1511: This vulnerability was found by Joseph Connor(the Cisco ASIG during internal security testing)

Affected Software

1 affected componentFixes available

Cisco SD-WAN vEdge Software=20.5, <20.5.1, =20.4, <20.4.1, >=.4, <18, =18.4, =19.2, =20.1, <=20.3, <20.3.4

20.5.120.4.120.3.4

Event History

May 5, 2021

Advisory Published

via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the severity of cisco-sa-sdwan-buffover-MWGucjtO?

The severity of cisco-sa-sdwan-buffover-MWGucjtO is critical due to the potential for arbitrary code execution and denial of service.

How do I fix cisco-sa-sdwan-buffover-MWGucjtO?