1. Home
  2. CVE Database
  3. CVE-2021-1300
CRITICAL · 9.8

CVE-2021-1300

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t...

Vulnerability Description

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoIos Xe Sd-Wan-
CiscoSd-Wan Firmware18.3.8
CiscoSd-Wan Vsmart Controller FirmwareAll versions
CiscoVedge 100 Router-
CiscoVedge 1000 Router-
CiscoVedge 100B Router-
CiscoVedge 100M Router-
CiscoVedge 100Wm Router-
CiscoVedge 2000 Router-
CiscoVedge 5000 Router-
CiscoVedge Cloud Router-
CiscoCatalyst Sd-Wan Manager-
CiscoSd-Wan Vbond Orchestrator-

Related Weaknesses (CWE)

CWE-120CWE-119

References

FAQ

What is CVE-2021-1300?

CVE-2021-1300 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see t...

How severe is CVE-2021-1300?

CVE-2021-1300 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-1300?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe Sd-Wan, Cisco Sd-Wan Firmware, Cisco Sd-Wan Vsmart Controller Firmware, Cisco Vedge 100 Router, Cisco Vedge 1000 Router.