cisco-sa-vmanage-YuTVWqy: Cisco SD-WAN vManage Software Vulnerabilities
First published: Wed Apr 07 2021(Updated: )
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy
Credit: Vulnerability CVE-2021-1479 was found during internal security testing. Jakub Olszak Stefan Zaryn for reporting the vulnerability CVE-2021-1137. Vulnerability CVE-2021-1480 was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN vManage | =20.4<20.4.1>=19.3=20.1<=20.3<20.3.3>=18.4 and earlier<=19.2<19.2.4 | 20.4.1 20.3.3 19.2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this Cisco SD-WAN vManage Software vulnerability?
The vulnerability ID is cisco-sa-vmanage-YuTVWqy.
What is the severity of the cisco-sa-vmanage-YuTVWqy vulnerability?
The severity of the cisco-sa-vmanage-YuTVWqy vulnerability is critical with a severity value of 9.8.
What is the affected software for the cisco-sa-vmanage-YuTVWqy vulnerability?
The affected software is Cisco SD-WAN vManage version 20.4.1, 20.3.3, and 19.2.4.
What can an unauthenticated remote attacker do with the cisco-sa-vmanage-YuTVWqy vulnerability?
An unauthenticated remote attacker can execute arbitrary code.
What can an authenticated local attacker do with the cisco-sa-vmanage-YuTVWqy vulnerability?
An authenticated local attacker can gain escalated privileges on an affected system.
- agent/author
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco sd-wan vmanage
- version/cisco sd-wan vmanage/20.4
- version/cisco sd-wan vmanage/19.3
- version/cisco sd-wan vmanage/20.1
- version/cisco sd-wan vmanage/20.3
- version/cisco sd-wan vmanage/18.4 and earlier
- version/cisco sd-wan vmanage/19.2