7.8

CVE-2021-1431

Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability

A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 3.15.1xbs
Cisco ≫ Ios Xe Version 3.15.2xbs
Cisco ≫ Ios Xe Version 16.11.1
Cisco ≫ Ios Xe Version 16.11.1a
Cisco ≫ Ios Xe Version 16.11.1b
Cisco ≫ Ios Xe Version 16.11.1c
Cisco ≫ Ios Xe Version 16.11.1s
Cisco ≫ Ios Xe Version 16.11.2
Cisco ≫ Ios Xe Version 16.12.1
Cisco ≫ Ios Xe Version 16.12.1a
Cisco ≫ Ios Xe Version 16.12.1c
Cisco ≫ Ios Xe Version 16.12.1s
Cisco ≫ Ios Xe Version 16.12.1t
Cisco ≫ Ios Xe Version 16.12.1w
Cisco ≫ Ios Xe Version 16.12.1x
Cisco ≫ Ios Xe Version 16.12.1y
Cisco ≫ Ios Xe Version 16.12.1z
Cisco ≫ Ios Xe Version 16.12.2
Cisco ≫ Ios Xe Version 16.12.2a
Cisco ≫ Ios Xe Version 16.12.2s
Cisco ≫ Ios Xe Version 16.12.2t
Cisco ≫ Ios Xe Version 16.12.3
Cisco ≫ Ios Xe Version 16.12.3a
Cisco ≫ Ios Xe Version 16.12.3s
Cisco ≫ Ios Xe Version 16.12.4
Cisco ≫ Ios Xe Version 16.12.4a
Cisco ≫ Ios Xe Version 17.2.1
Cisco ≫ Ios Xe Version 17.2.1a
Cisco ≫ Ios Xe Version 17.2.1r
Cisco ≫ Ios Xe Version 17.2.1v
Cisco ≫ Ios Xe Version 17.2.2
Cisco ≫ Ios Xe Version 17.2.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.6% 0.726
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Cisco PSIRT 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwdos-4zeEeC9w
Vendor Advisory