Buffer overflow in Cisco Systems, Inc products - CVE-2021-1300

Vulnerability identifier: #VU49898

CSH Severity: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2021-1300

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Cisco SD-WAN
Cisco IOS XE SD-WAN
Cisco SD-WAN vBond Orchestrator
Cisco SD-WAN vManage
Cisco IOS XE
Cisco SD-WAN vEdge Cloud Router
Cisco SD-WAN vEdge Routers
Cisco SD-WAN vSmart Controller

Software vendor:
Cisco Systems, Inc

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to incorrect handling of IP traffic. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Install updates from vendor's website.

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj