CVE-2021-1466

Cisco SD-WAN vDaemon Buffer Overflow Vulnerability

State
Published
Severity
5.4 Medium
Published
Nov 15, 2024
Updated
Nov 15, 2024
Reserved
Nov 13, 2020

Read the record on cve.org

Description

A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause a buffer overflow on an affected system, resulting in a denial of service (DoS) condition. The vulnerability is due to incomplete bounds checks for data that is provided to the vDaemon service of an affected system. An attacker could exploit this vulnerability by sending malicious data to the vDaemon listening service on the affected system. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could allow the attacker to cause the vDaemon listening service to reload and result in a DoS condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Scores

CVSSScoreVectorSource
3.15.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/RL:X/RC:X/E:Xcisco

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
Cisco Catalyst SD-WAN ManagerCisco
  • 19.2.1Affected
  • 18.4.4Affected
  • 20.1.1.1Affected
  • 20.1.1Affected
  • 19.3.0Affected
  • 19.2.2Affected
  • 19.2.099Affected
  • 18.3.6Affected
  • 18.3.7Affected
  • 19.2.0Affected
  • 18.3.8Affected
  • 19.0.0Affected
  • 19.1.0Affected
  • 18.4.302Affected
  • 18.4.303Affected
  • 19.2.097Affected
  • 19.2.098Affected
  • 17.2.10Affected
  • 18.3.6.1Affected
  • 19.0.1aAffected
  • 18.2.0Affected
  • 18.4.3Affected
  • 18.4.1Affected
  • 17.2.8Affected
  • 18.3.3.1Affected
  • and 13 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.