CVE-2021-1484

Cisco SD-WAN vManage Command Injection Vulnerability

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition.
This vulnerability is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this vulnerability by submitting crafted input to the device template configuration. A successful exploit could allow the attacker to cause a DoS condition on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

*Credits: N/A

CVSS Scores

Ciscov3.1 6.5

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2020-11-13 CVE Reserved
2024-11-15 CVE Published
2024-11-15 CVE Updated
2024-11-16 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

CAPEC

References (2)

URL	Tag	Source
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHX
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9Mfu

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.12 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.12"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.3.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.2"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.099 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.099"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.7"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.8"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.0.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.1.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.1.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.302 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.302"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.303 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.303"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.097 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.097"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.098 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.098"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.10 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.10"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.6.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.6.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.0.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.2.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.2.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.8 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.8"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.6 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.6"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.9 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.9"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.5 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.5"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.4.0.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.7 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.7"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				17.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "17.2.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				18.3.0 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "18.3.0"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.3.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.3.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.1.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.1.2"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.929 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.929"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.31 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.31"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.3.2 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.3.2"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.3.2.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.3.2.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.4.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.4.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.4.1.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.4.1.0.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.4 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.4"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.4.1.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.4.1.1"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				20.3.3 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "20.3.3"		en		Affected
Cisco Search vendor "Cisco"		Cisco Catalyst SD-WAN Manager Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager"				19.2.4.0.1 Search vendor "Cisco" for product "Cisco Catalyst SD-WAN Manager" and version "19.2.4.0.1"		en		Affected