Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1234

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to view sensitive information on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Published

2024-11-18T16:15:08.813

Last Modified

2025-08-04T14:44:52.627

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-497
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco catalyst_sd-wan_manager 17.2.4 Yes
Application cisco catalyst_sd-wan_manager 17.2.5 Yes
Application cisco catalyst_sd-wan_manager 17.2.6 Yes
Application cisco catalyst_sd-wan_manager 17.2.7 Yes
Application cisco catalyst_sd-wan_manager 17.2.8 Yes
Application cisco catalyst_sd-wan_manager 17.2.9 Yes
Application cisco catalyst_sd-wan_manager 17.2.10 Yes
Application cisco catalyst_sd-wan_manager 18.2.0 Yes
Application cisco catalyst_sd-wan_manager 18.3.0 Yes
Application cisco catalyst_sd-wan_manager 18.3.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.1.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.3 Yes
Application cisco catalyst_sd-wan_manager 18.3.3.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.4 Yes
Application cisco catalyst_sd-wan_manager 18.3.5 Yes
Application cisco catalyst_sd-wan_manager 18.3.6 Yes
Application cisco catalyst_sd-wan_manager 18.3.6.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.7 Yes
Application cisco catalyst_sd-wan_manager 18.3.8 Yes
Application cisco catalyst_sd-wan_manager 18.4.0 Yes
Application cisco catalyst_sd-wan_manager 18.4.0.1 Yes
Application cisco catalyst_sd-wan_manager 18.4.1 Yes
Application cisco catalyst_sd-wan_manager 18.4.3 Yes
Application cisco catalyst_sd-wan_manager 18.4.4 Yes
Application cisco catalyst_sd-wan_manager 18.4.5 Yes
Application cisco catalyst_sd-wan_manager 18.4.6 Yes
Application cisco catalyst_sd-wan_manager 18.4.302 Yes
Application cisco catalyst_sd-wan_manager 18.4.303 Yes
Application cisco catalyst_sd-wan_manager 18.4.501_es Yes
Application cisco catalyst_sd-wan_manager 19.0.0 Yes
Application cisco catalyst_sd-wan_manager 19.0.1a Yes
Application cisco catalyst_sd-wan_manager 19.1.0 Yes
Application cisco catalyst_sd-wan_manager 19.2.0 Yes
Application cisco catalyst_sd-wan_manager 19.2.1 Yes
Application cisco catalyst_sd-wan_manager 19.2.2 Yes
Application cisco catalyst_sd-wan_manager 19.2.3 Yes
Application cisco catalyst_sd-wan_manager 19.2.31 Yes
Application cisco catalyst_sd-wan_manager 19.2.32 Yes
Application cisco catalyst_sd-wan_manager 19.2.097 Yes
Application cisco catalyst_sd-wan_manager 19.2.098 Yes
Application cisco catalyst_sd-wan_manager 19.2.099 Yes
Application cisco catalyst_sd-wan_manager 19.2.929 Yes
Application cisco catalyst_sd-wan_manager 19.3.0 Yes
Application cisco catalyst_sd-wan_manager 20.1.1 Yes
Application cisco catalyst_sd-wan_manager 20.1.1.1 Yes
Application cisco catalyst_sd-wan_manager 20.1.2 Yes
Application cisco catalyst_sd-wan_manager 20.1.2_937 Yes
Application cisco catalyst_sd-wan_manager 20.1.12 Yes
References