CVE-2021-1234
Cisco SD-WAN vManage Information Disclosure Vulnerabilities
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode.
This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to view sensitive information on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Una vulnerabilidad en la interfaz de administración de clústeres de Cisco SD-WAN vManage Software podría permitir que un atacante remoto no autenticado vea información confidencial en un sistema afectado. Para verse afectado por esta vulnerabilidad, el software vManage debe estar en modo de clúster. Esta vulnerabilidad se debe a la ausencia de autenticación para información confidencial en la interfaz de administración de clústeres. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud diseñada a la interfaz de administración de clústeres de un sistema afectado. Una explotación exitosa podría permitir que el atacante vea información confidencial en el sistema afectado. Cisco ha publicado actualizaciones de software que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2024-11-18 CVE Published
- 2024-11-18 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmaninfdis3-OvdR6uu8 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.12 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.12" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.3.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.099 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.099" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.0.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.1.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.1.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.302 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.302" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.303 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.303" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.097 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.097" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.098 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.098" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.10 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.10" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.6.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.2.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.9 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.9" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.929 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.929" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.31 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.31" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.32 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.32" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.6" | en |
Affected
| ||||||