Cisco SD-WAN vManage Software Vulnerability Could Lead to Sensitive Information Theft

CVE-2021-1481

Summary

A vulnerability exists in the web-based management interface of Cisco SD-WAN vManage Software, allowing an authenticated remote attacker to execute Cypher query language injection attacks. This issue arises from inadequate input validation within the interface. An attacker can exploit this vulnerability by sending specially crafted HTTP requests to the management interface of an affected system, potentially gaining access to sensitive information. Cisco has issued software updates to mitigate this vulnerability, with no alternative workarounds available.

References