CVE-2021-1484

CVSS V2 None CVSS V3 None

Description

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition. This vulnerability is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this vulnerability by submitting crafted input to the device template configuration. A successful exploit could allow the attacker to cause a DoS condition on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Overview

CVE ID
CVE-2021-1484

Assigner
cisco

Vulnerability Status
PUBLISHED

Published Version
2024-11-15T16:26:12.341Z

Last Modified Date
2024-11-15T17:59:14.156Z

Weakness Enumerations

CWE	URL
CWE-88	http://cwe.mitre.org/data/definitions/88.html

References

Reference URL	Reference Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHX
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9Mfu

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2021-1484
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1484

History

Created	Old Value	New Value	Data Type	Notes
2024-11-16 12:08:02				Added to TrackCVE