CVE-2021-1465
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on an affected system.
The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system.
Una vulnerabilidad en la interfaz de administración basada en web del software Cisco SD-WAN vManage podría permitir que un atacante remoto autenticado realice un ataque de directory traversal y obtenga acceso de lectura a archivos confidenciales en un sistema afectado. La vulnerabilidad se debe a una validación insuficiente de las solicitudes HTTP. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud HTTP manipulada que contenga secuencias de caracteres de directory traversal a un sistema afectado. Una explotación exitosa podría permitir al atacante escribir archivos arbitrarios en el sistema afectado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2024-11-18 CVE Published
- 2024-11-18 CVE Updated
- 2024-11-19 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-dir-trav-Bpwc5gtm |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.9 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.9" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.10 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.10" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 17.2.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.8" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.6.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.302 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.302" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.303 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.303" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.097 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.097" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.099 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.099" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.31 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.31" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.2.929 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.929" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.12 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.12" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 20.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.3.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 19.1.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.1.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" | 18.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.2.0" | en |
Affected
| ||||||