CVE-2021-1491

CWE-594 documents4 sources
Severity
6.5MEDIUM
EPSS
0.4%
top 42.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco Catalyst Sd-wan ManagerCisco Catalyst Sd-wan Manager
Timeline
PublishedNov 15

Description

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device. This vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the file system and then accessing it through the web-based management interface. A successful exploit could allow the attacker to read arbitrary fil…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDcisco/catalyst_sd-wan_manager63 versions+62
▶CVEListV5cisco/cisco_catalyst_sd-wan_manager63 versions+62

🔴Vulnerability Details

2
GHSA
GHSA-4fp3-wrmc-3g2x: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary↗2024-11-15
▶
CVEList
Cisco SD-WAN vManage Software Information Disclosure Vulnerability↗2024-11-15
▶

📋Vendor Advisories

1
Cisco
Cisco SD-WAN vManage Software Information Disclosure Vulnerability↗2021-04-21
▶
CVE-2021-1491 (MEDIUM CVSS 6.5) | A vulnerability in the web-based ma | cvebase.io