CVE-2021-1480 PoC — Cisco SD-WAN vManage Software Vulnerabilities

Source

https://github.com/xmco/sdwan-cve-2021-1480

Associated Vulnerability

Title:Cisco SD-WAN vManage Software Vulnerabilities (CVE-2021-1480)
Description:Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.

Description

PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN.

Readme

# Exploit for CVE-2021-1480 (SD-WAN)

PoC materials to exploit the CVE-2021-1480 on Cico SD-WAN. The full publicaiton is available on XMCO website : 

* https://blog.xmco.fr/wp-content/uploads/2021/08/XMCO-SDWAN_Report-CVE-2021-1480.pdf

Usage:
1. update Lines 173 and 176 to set the uid of the current user
2. Start the proxy: `python cve-2021-1480.py -L 4564 127.0.0.1 4565`
3. Start the confd_cli: `CONFD_IPC_PORT=4564 /usr/bin/confd_cli`
4. Commands on the confd_cli are now executed by `root`

Source: https://github.com/nccgroup/tcpprox/blob/master/prox.py

File Snapshot


 [4.0K]  /data/pocs/99b6059c06ca787403b48d4e56c7aa722fa78d32
├── [ 11K]  cve-2021-1480.py
└── [ 563]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!