CVE-2021-1305CWE-20

Cisco SD-WAN vManage Authorization Bypass Vulnerabilities

High · published January 20, 2021

CVSS v3.1
8.8
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01312 · 70.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-01-20T20:01Z
EPSS history
Timeline
  • 20 JAN 20:01Z
    Cisco SD-WAN vManage Authorization Bypass Vulnerabilities
    cvelistv5