Input validation error in Cisco Systems, Inc products - CVE-2021-1431

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU51783

Input validation error in Cisco Systems, Inc products - CVE-2021-1431

Published: March 30, 2021


Vulnerability identifier: #VU51783
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1431
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the vDaemon process. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


Affected software

Cisco 1000 Series Integrated Services Routers
4000 Series Integrated Services Routers
Cisco ASR 1000 Series Aggregation Services Routers
Cloud Services Router 1000V Series
Cisco IOS XE SD-WAN

How to mitigate CVE-2021-1431

Install updates from vendor's website.

Cisco IOS XE SD-WAN - addressed in versions 16.12.4.57, 16.12.5, 16.12.5a, 17.2.2.1, 17.3.0.220, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1a, 17.3.1.17, 17.3.2, 17.3.2a, 17.3.3, 17.4.0.83, 17.4.1, 17.4.1a, 17.4.1 b

External References

Related Security Bulletins