CVE-2021-1512

CWE-552 — Files Accessible to External Parties4 documents4 sources
Severity
6.0MEDIUM
EPSS
0.1%
top 81.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Catalyst Sd-wan ManagerCisco Sd-wan VmanageCisco Cisco Sd-wan Solution
Timeline
PublishedMay 6
Latest updateMay 24

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HExploitability: 0.8 | Impact: 5.2

Affected Packages3 packages

▶NVDcisco/sd-wan_vmanage20.1 — 20.1.2+1
▶NVDcisco/catalyst_sd-wan_manager19.2 — 19.2.3+3

🔴Vulnerability Details

2
GHSA
GHSA-c5wr-523p-2hqc: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file s↗2022-05-24
▶
CVEList
Cisco SD-WAN Software Arbitrary File Corruption Vulnerability↗2021-05-06
▶

📋Vendor Advisories

1
Cisco
Cisco SD-WAN Software Arbitrary File Corruption Vulnerability↗2021-05-05
▶
CVE-2021-1512 (MEDIUM CVSS 6) | A vulnerability in the CLI of Cisco | cvebase.io