CVE-2021-1260CWE-20

Cisco SD-WAN Command Injection Vulnerabilities

High · published January 20, 2021

CVSS v3.0
8.1
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01446 · 73.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-01-20T19:57Z
EPSS history
Timeline
  • 20 JAN 19:57Z
    Cisco SD-WAN Command Injection Vulnerabilities
    cvelistv5