1. Home
  2. CVE Database
  3. CVE-2021-1546
MEDIUM · 5.5

CVE-2021-1546

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access throu...

Vulnerability Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access through the CLI. An attacker could exploit this vulnerability by running a CLI command that targets an arbitrary file on the local system. A successful exploit could allow the attacker to return portions of an arbitrary file, possibly resulting in the disclosure of sensitive information.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CiscoCatalyst Sd-Wan Manager>= 18.4, < 20.4.2
CiscoSd-Wan Vbond Orchestrator>= 18.4, < 20.4.2
CiscoSd-Wan Vmanage>= 20.5, < 20.5.2
CiscoVsmart Controller Firmware>= 18.4, < 20.4.2
CiscoVsmart Controller-
CiscoVedge 100 Firmware>= 18.4, < 20.4.2
CiscoVedge 100-
CiscoVedge 1000 Firmware>= 18.4, < 20.4.2
CiscoVedge 1000-
CiscoVedge 100B Firmware>= 18.4, < 20.4.2
CiscoVedge 100B-
CiscoVedge 100M Firmware>= 18.4, < 20.4.2
CiscoVedge 100M-
CiscoVedge 100Wm Firmware>= 18.4, < 20.4.2
CiscoVedge 100Wm-
CiscoVedge 2000 Firmware>= 18.4, < 20.4.2
CiscoVedge 2000-
CiscoVedge 5000 Firmware>= 18.4, < 20.4.2
CiscoVedge 5000-
CiscoVedge Cloud Firmware>= 18.4, < 20.4.2

Related Weaknesses (CWE)

CWE-209

References

FAQ

What is CVE-2021-1546?

CVE-2021-1546 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This vulnerability is due to improper protections on file access throu...

How severe is CVE-2021-1546?

CVE-2021-1546 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1546?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Catalyst Sd-Wan Manager, Cisco Sd-Wan Vbond Orchestrator, Cisco Sd-Wan Vmanage, Cisco Vsmart Controller Firmware, Cisco Vsmart Controller.