Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-1491

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device. This vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the file system and then accessing it through the web-based management interface. A successful exploit could allow the attacker to read arbitrary files from the file system of the underlying operating system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Published

2024-11-15T17:15:09.220

Last Modified

2025-08-04T14:42:10.270

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-59
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco catalyst_sd-wan_manager 17.2.4 Yes
Application cisco catalyst_sd-wan_manager 17.2.5 Yes
Application cisco catalyst_sd-wan_manager 17.2.6 Yes
Application cisco catalyst_sd-wan_manager 17.2.7 Yes
Application cisco catalyst_sd-wan_manager 17.2.8 Yes
Application cisco catalyst_sd-wan_manager 17.2.9 Yes
Application cisco catalyst_sd-wan_manager 17.2.10 Yes
Application cisco catalyst_sd-wan_manager 18.2.0 Yes
Application cisco catalyst_sd-wan_manager 18.3.0 Yes
Application cisco catalyst_sd-wan_manager 18.3.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.1.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.3 Yes
Application cisco catalyst_sd-wan_manager 18.3.3.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.4 Yes
Application cisco catalyst_sd-wan_manager 18.3.5 Yes
Application cisco catalyst_sd-wan_manager 18.3.6 Yes
Application cisco catalyst_sd-wan_manager 18.3.6.1 Yes
Application cisco catalyst_sd-wan_manager 18.3.7 Yes
Application cisco catalyst_sd-wan_manager 18.3.8 Yes
Application cisco catalyst_sd-wan_manager 18.4.0 Yes
Application cisco catalyst_sd-wan_manager 18.4.0.1 Yes
Application cisco catalyst_sd-wan_manager 18.4.1 Yes
Application cisco catalyst_sd-wan_manager 18.4.3 Yes
Application cisco catalyst_sd-wan_manager 18.4.4 Yes
Application cisco catalyst_sd-wan_manager 18.4.5 Yes
Application cisco catalyst_sd-wan_manager 18.4.6 Yes
Application cisco catalyst_sd-wan_manager 18.4.302 Yes
Application cisco catalyst_sd-wan_manager 18.4.303 Yes
Application cisco catalyst_sd-wan_manager 18.4.501_es Yes
Application cisco catalyst_sd-wan_manager 19.0.0 Yes
Application cisco catalyst_sd-wan_manager 19.0.1a Yes
Application cisco catalyst_sd-wan_manager 19.1.0 Yes
Application cisco catalyst_sd-wan_manager 19.2.0 Yes
Application cisco catalyst_sd-wan_manager 19.2.1 Yes
Application cisco catalyst_sd-wan_manager 19.2.2 Yes
Application cisco catalyst_sd-wan_manager 19.2.3 Yes
Application cisco catalyst_sd-wan_manager 19.2.4 Yes
Application cisco catalyst_sd-wan_manager 19.2.4.0.1 Yes
Application cisco catalyst_sd-wan_manager 19.2.31 Yes
Application cisco catalyst_sd-wan_manager 19.2.32 Yes
Application cisco catalyst_sd-wan_manager 19.2.097 Yes
Application cisco catalyst_sd-wan_manager 19.2.098 Yes
Application cisco catalyst_sd-wan_manager 19.2.099 Yes
Application cisco catalyst_sd-wan_manager 19.2.929 Yes
Application cisco catalyst_sd-wan_manager 19.3.0 Yes
Application cisco catalyst_sd-wan_manager 20.1.1 Yes
Application cisco catalyst_sd-wan_manager 20.1.1.1 Yes
Application cisco catalyst_sd-wan_manager 20.1.2 Yes
Application cisco catalyst_sd-wan_manager 20.1.2_937 Yes
Application cisco catalyst_sd-wan_manager 20.1.12 Yes
Application cisco catalyst_sd-wan_manager 20.3.1 Yes
Application cisco catalyst_sd-wan_manager 20.3.2 Yes
Application cisco catalyst_sd-wan_manager 20.3.2.1 Yes
Application cisco catalyst_sd-wan_manager 20.3.2.1_927 Yes
Application cisco catalyst_sd-wan_manager 20.3.2.1_930 Yes
Application cisco catalyst_sd-wan_manager 20.3.2_925 Yes
Application cisco catalyst_sd-wan_manager 20.3.2_928 Yes
Application cisco catalyst_sd-wan_manager 20.3.2_929 Yes
Application cisco catalyst_sd-wan_manager 20.3.2_937 Yes
Application cisco catalyst_sd-wan_manager 20.3.3 Yes
Application cisco catalyst_sd-wan_manager 20.4.1 Yes
Application cisco catalyst_sd-wan_manager 20.4.1.0.1 Yes
Application cisco catalyst_sd-wan_manager 20.4.1.1 Yes
References