Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-1513— Cisco SD-WAN Software vDaemon Denial of Service Vulnerability

CVSS 7.5 · High EPSS 0.82% · P74
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-1513

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco SD-WAN Software vDaemon Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco SD-WAN vManage 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco SD-WAN vManage是美国思科(Cisco)公司的一个高度可定制的仪表板。可简化和自动化 Cisco SD-WAN 的部署、配置、管理和操作。 Cisco SD-WAN vManage Software 存在输入验证错误漏洞,未经认证的远程攻击者可利用该漏洞导致设备重新加载,从而导致拒绝服务(DoS)状态。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco SD-WAN Solution n/a -

II. Public POCs for CVE-2021-1513

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-1513

登录查看更多情报信息。

Same Patch Batch · Cisco · 2021-05-06 · 41 CVEs total

CVE-2021-15089.8 CRITICALCisco SD-WAN vManage Software Vulnerabilities
CVE-2021-12759.8 CRITICALCisco SD-WAN vManage Software Vulnerabilities
CVE-2021-14689.8 CRITICALCisco SD-WAN vManage Software Vulnerabilities
CVE-2021-14979.8 CRITICALCisco HyperFlex HX Command Injection Vulnerabilities
CVE-2021-14989.8 CRITICALCisco HyperFlex HX Command Injection Vulnerabilities
CVE-2021-15069.8 CRITICALCisco SD-WAN vManage Software Vulnerabilities
CVE-2021-15059.8 CRITICALCisco SD-WAN vManage Software Vulnerabilities
CVE-2021-12848.8 HIGHCisco SD-WAN vManage Software Authentication Bypass Vulnerability
CVE-2021-14008.8 HIGHCisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities
CVE-2021-14018.8 HIGHCisco Small Business 100, 300, and 500 Series Wireless Access Points Vulnerabilities
CVE-2021-14217.8 HIGHCisco Enterprise NFV Infrastructure Software Command Injection Vulnerability
CVE-2021-15107.5 HIGHCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities
CVE-2021-15097.5 HIGHCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities
CVE-2021-15117.5 HIGHCisco SD-WAN vEdge Software Buffer Overflow Vulnerabilities
CVE-2021-13657.1 HIGHCisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
CVE-2021-13637.1 HIGHCisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
CVE-2021-14277.0 HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabi
CVE-2021-14267.0 HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabi
CVE-2021-14307.0 HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabi
CVE-2021-14967.0 HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabi

Showing top 20 of 41 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-1513

No comments yet


Leave a comment