Cisco SD-WAN vDaemon Buffer Overflow Vulnerability (CVE-2021-1466) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Cisco SD-WAN vDaemon Buffer Overflow Vulnerability - Vulnerability ID: cisco-sa-sdwan-vdaemon-bo-RuzzEA2 - CVE Number: CVE-2021-1466 - CVSS Score: Base 5.4 2. Affected Products: - Affected Versions: 18.4.5, 19.2.3, 20.1.12, 20.3.1, 20.4.1 - Affected Software: Cisco SD-WAN vManage Software 3. Vulnerability Type: - Vulnerability Type: Buffer Overflow - Description: Due to incomplete boundary checks in the vDaemon service, an attacker can exploit this vulnerability by sending malicious data to the vDaemon listening service on the affected system, resulting in a denial-of-service (DoS) condition. 4. Remediation: - Available Fix: Software updates have been released to address this vulnerability. - Workaround: No workaround is available. 5. Affected Product List: - Confirmed Affected Products: List of affected software versions. - Confirmed Unaffected Products: List of unaffected software versions. 6. Security Policy: - Security Vulnerability Disclosure Policy: Link to the security vulnerability disclosure policy page. 7. Rating and Feedback: - User Rating: Displays user ratings for the vulnerability. - Average Rating: Displays the average rating. 8. Source: - Discovery Method: The vulnerability was discovered during internal security testing. 9. URL: - Vulnerability Details Page: Link to the detailed vulnerability page. 10. Revision History: - Version: 1.0 - Release Date: March 3, 2021 This information provides a detailed description of the vulnerability, affected products, remediation steps, ratings, and other critical details.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco SD-WAN vDaemon Buffer Overflow Vulnerability (CVE-2021-1466) Advisory