Cisco Catalyst SD-WAN Manager up to 20.4.1.1 Web-based Management Interface link following

Summaryinfo

A vulnerability was found in Cisco Catalyst SD-WAN Manager. It has been declared as critical. Affected by this issue is some unknown functionality of the component Web-based Management Interface. Such manipulation leads to link following. This vulnerability is referenced as CVE-2021-1491. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Cisco Catalyst SD-WAN Manager. Affected by this issue is some unknown processing of the component Web-based Management Interface. The manipulation with an unknown input leads to a link following vulnerability. Using CWE to declare the problem leads to CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Impacted is confidentiality. CVE summarizes:

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device. This vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the file system and then accessing it through the web-based management interface. A successful exploit could allow the attacker to read arbitrary files from the file system of the underlying operating system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability is handled as CVE-2021-1491 since 11/13/2020. The exploitation is known to be easy. The attack may be launched remotely. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 08/04/2025).

Upgrading eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Network Management Software

Vendor

• Cisco

Name

• Catalyst SD-WAN Manager

Version

• 17.2.4
• 17.2.5
• 17.2.6
• 17.2.7
• 17.2.8
• 17.2.9
• 17.2.10
• 18.2.0
• 18.3.0
• 18.3.1
• 18.3.1.1
• 18.3.3
• 18.3.3.1
• 18.3.4
• 18.3.5
• 18.3.6
• 18.3.6.1
• 18.3.7
• 18.3.8
• 18.4.0
• 18.4.0.1
• 18.4.1
• 18.4.3
• 18.4.4
• 18.4.5
• 18.4.6
• 18.4.302
• 18.4.303
• 18.4.501_ES
• 19.0.0
• 19.0.1a
• 19.1.0
• 19.2.0
• 19.2.097
• 19.2.098
• 19.2.099
• 19.2.1
• 19.2.2
• 19.2.3
• 19.2.4
• 19.2.4.0.1
• 19.2.31
• 19.2.32
• 19.2.929
• 19.3.0
• 20.1.1
• 20.1.1.1
• 20.1.2
• 20.1.2_937
• 20.1.12
• 20.3.1
• 20.3.2
• 20.3.2.1
• 20.3.2.1_927
• 20.3.2.1_930
• 20.3.2_925
• 20.3.2_928
• 20.3.2_929
• 20.3.2_937
• 20.3.3
• 20.4.1
• 20.4.1.0.1
• 20.4.1.1

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion