CVE-2021-1462
Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
Severity Score
4.4
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system.
The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Una vulnerabilidad en la CLI del software Cisco SD-WAN vManage podría permitir que un atacante local autenticado eleve los privilegios en un sistema afectado. Para explotar esta vulnerabilidad, un atacante necesitaría tener una cuenta de administrador válida en un sistema afectado. La vulnerabilidad se debe a una asignación incorrecta de privilegios. Un atacante podría explotar esta vulnerabilidad iniciando sesión en un sistema afectado con una cuenta de administrador y creando un archivo malicioso, que el sistema analizaría más adelante. Una explotación exitosa podría permitir que el atacante obtenga privilegios de superusuario en el sistema afectado. Cisco ha publicado actualizaciones de software que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2024-11-18 CVE Published
- 2024-11-18 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-kth3c82B |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.12 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.12" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.3.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.099 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.099" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.0.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.1.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.1.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.302 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.302" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.303 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.303" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.097 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.097" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.098 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.098" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.10 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.10" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.6.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.2.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.9 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.9" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.4" | en |
Affected
| ||||||