Cisco Catalyst SD-WAN Manager up to 20.1.12 CLI input validation

Summaryinfo

A vulnerability, which was classified as critical, was found in Cisco Catalyst SD-WAN Manager. Affected by this issue is some unknown functionality of the component CLI. The manipulation results in Local Privilege Escalation. This vulnerability is known as CVE-2021-1462. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Catalyst SD-WAN Manager. It has been classified as critical. Affected is some unknown functionality of the component CLI. The manipulation with an unknown input leads to a local privilege escalation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability is traded as CVE-2021-1462 since 11/13/2020. The exploitability is told to be easy. The attack needs to be approached locally. The exploitation requires an enhanced level of successful authentication. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Network Management Software

Vendor

• Cisco

Name

• Catalyst SD-WAN Manager

Version

• 17.2.4
• 17.2.5
• 17.2.6
• 17.2.7
• 17.2.8
• 17.2.9
• 17.2.10
• 18.2.0
• 18.3.1
• 18.3.1.1
• 18.3.3
• 18.3.3.1
• 18.3.4
• 18.3.5
• 18.3.6
• 18.3.6.1
• 18.3.7
• 18.3.8
• 18.4.0
• 18.4.0.1
• 18.4.1
• 18.4.3
• 18.4.4
• 18.4.5
• 18.4.302
• 18.4.303
• 19.0.0
• 19.0.1a
• 19.1.0
• 19.2.0
• 19.2.097
• 19.2.098
• 19.2.099
• 19.2.1
• 19.2.2
• 19.3.0
• 20.1.1
• 20.1.1.1
• 20.1.12

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion