Main Vulnerability Database Vulnerabilities #VU52927

Buffer overflow in Cisco SD-WAN vEdge Routers and Cisco SD-WAN vEdge Cloud Router - CVE-2021-1509

Published: May 6, 2021

Vulnerability identifier: #VU52927

CSH Severity: Medium

CVSS v4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-1509

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the vDaemon process in Cisco SD-WAN vEdge Software. A remote user can send specially crafted traffic to the system, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Cisco SD-WAN vEdge Routers
Cisco SD-WAN vEdge Cloud Router

How to mitigate CVE-2021-1509

Install updates from vendor's website.

Cisco SD-WAN vEdge Routers - addressed in versions 20.4.1, 20.5.1
Cisco SD-WAN vEdge Cloud Router - addressed in versions 20.4.1, 20.5.1

External References

Related Security Bulletins