1. Home
  2. CVE Database
  3. CVE-2021-1528
HIGH · 7.8

CVE-2021-1528

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected softw...

Vulnerability Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this vulnerability by invoking a privileged process in the affected system. A successful exploit could allow the attacker to perform actions with the privileges of the root user.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoCatalyst Sd-Wan Manager>= 20.4, < 20.4.2
CiscoSd-Wan Vbond Orchestrator>= 20.4, < 20.4.2
CiscoVsmart Controller>= 20.4, < 20.4.2
CiscoVedge 100 Firmware>= 20.4, < 20.4.2
CiscoVedge 100-
CiscoVedge 1000 Firmware>= 20.4, < 20.4.2
CiscoVedge 1000-
CiscoVedge 100B Firmware>= 20.4, < 20.4.2
CiscoVedge 100B-
CiscoVedge 100M Firmware>= 20.4, < 20.4.2
CiscoVedge 100M-
CiscoVedge 100Wm Firmware>= 20.4, < 20.4.2
CiscoVedge 100Wm-
CiscoVedge 2000 Firmware>= 20.4, < 20.4.2
CiscoVedge 2000-
CiscoVedge 5000 Firmware>= 20.4, < 20.4.2
CiscoVedge 5000-
CiscoVedge Cloud Firmware>= 20.4, < 20.4.2
CiscoVedge Cloud-

Related Weaknesses (CWE)

CWE-250

References

FAQ

What is CVE-2021-1528?

CVE-2021-1528 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected softw...

How severe is CVE-2021-1528?

CVE-2021-1528 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1528?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Catalyst Sd-Wan Manager, Cisco Sd-Wan Vbond Orchestrator, Cisco Vsmart Controller, Cisco Vedge 100 Firmware, Cisco Vedge 100.