VULNERABILITY INTELLIGENCE
CVE-2021-1508
CVSS score9.8 CRITICAL
EPSS probability1.63%
CISA KEVNot currently listed
Published2021-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory.
Weakness classification
- psirt@cisco.com: CWE-20
- nvd@nist.gov: CWE-862
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory