1. Home
  2. CVE Database
  3. CVE-2021-1512
MEDIUM · 6.0

CVE-2021-1512

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is...

Vulnerability Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system.

CVSS Score

6.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoCatalyst Sd-Wan Manager>= 19.2, < 19.2.3
CiscoSd-Wan Vbond Orchestrator-
CiscoSd-Wan Vmanage< 18.4.6
CiscoVsmart Controller Firmware-
CiscoVsmart Controller-
CiscoVedge 100 Firmware-
CiscoVedge 100-
CiscoVedge 1000 Firmware-
CiscoVedge 1000-
CiscoVedge 100B Firmware-
CiscoVedge 100B-
CiscoVedge 100M Firmware-
CiscoVedge 100M-
CiscoVedge 100Wm Firmware-
CiscoVedge 100Wm-
CiscoVedge 2000 Firmware-
CiscoVedge 2000-
CiscoVedge 5000 Firmware-
CiscoVedge 5000-
CiscoVedge-100B Firmware-

Related Weaknesses (CWE)

CWE-552

References

FAQ

What is CVE-2021-1512?

CVE-2021-1512 is a vulnerability with a CVSS score of 6.0 (MEDIUM). A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is...

How severe is CVE-2021-1512?

CVE-2021-1512 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1512?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Catalyst Sd-Wan Manager, Cisco Sd-Wan Vbond Orchestrator, Cisco Sd-Wan Vmanage, Cisco Vsmart Controller Firmware, Cisco Vsmart Controller.