CVE-2021-1274

EPSS 0.69%
Published 20.01.2021 20:15:15
Last modified 21.11.2024 05:43:58
Source psirt@cisco.com
Teams watchlist Login
Open Login

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products Warnungen 0 Metrics 4 CWE 2 References 4

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Sd-wan Version-

   Cisco ≫ Vedge 100 Router Version-
   Cisco ≫ Vedge 1000 Router Version-
   Cisco ≫ Vedge 100b Router Version-
   Cisco ≫ Vedge 100m Router Version-
   Cisco ≫ Vedge 100wm Router Version-
   Cisco ≫ Vedge 2000 Router Version-
   Cisco ≫ Vedge 5000 Router Version-
   Cisco ≫ Vedge Cloud Router Version-

Cisco ≫ Sd-wan Firmware Version18.3.5

Cisco ≫ Sd-wan Firmware Version18.3.8

Cisco ≫ Sd-wan Firmware Version18.4.1

Cisco ≫ Sd-wan Firmware Version18.4.4

Cisco ≫ Sd-wan Firmware Version18.4.5

Cisco ≫ Sd-wan Firmware Version19.2.0

Cisco ≫ Sd-wan Firmware Version19.2.1

Cisco ≫ Sd-wan Firmware Version19.2.2

Cisco ≫ Sd-wan Firmware Version19.2.99

Cisco ≫ Sd-wan Firmware Version20.1.0

Cisco ≫ Sd-wan Vsmart Controller Firmware

Cisco ≫ Catalyst Sd-wan Manager Version-

Cisco ≫ Sd-wan Vbond Orchestrator Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.69%	0.709

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C
psirt@cisco.com	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-1274

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-1274

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-1274

EUVD