Cisco SD-WAN vManage Software Vulnerability Could Allow Remote Access to Sensitive Information

CVE-2021-1232

Summary

A vulnerability exists in the web-based management interface of Cisco SD-WAN vManage Software, which may allow an authenticated remote attacker to read arbitrary files on the system's filesystem. This issue arises from inadequate access control that permits unauthorized access to sensitive information stored on the affected systems. By exploiting this vulnerability, an attacker can gain unauthorized visibility into files and potentially access devices and other critical network management systems that should remain secure. Remedies are available through software updates provided by Cisco, and no workaround is effective against this vulnerability.

References