CVE-2021-1302CWE-20

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

High · published January 20, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01776 · 78.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-01-20T19:55Z
EPSS history
Timeline
  • 20 JAN 19:55Z
    Cisco SD-WAN vManage Authorization Bypass Vulnerabilities
    cvelistv5