CVE-2021-1511

Published May 6, 2021
Last updated a year ago
Overview

Description: Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Source: ykramarz@cisco.com
NVD status: Modified
Hype score: Not currently trending
Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM
CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:N/I:N/A:C
Weaknesses

ykramarz@cisco.com: CWE-119
Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7BFED2F3-4C18-4BE5-9F97-2CFCE37E7A2E",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B89D5AE2-3ED3-4C57-AF93-E9750D38F029",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDE3B3E4-CE46-454C-B7A1-2A42657C7035"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50C849A5-EBF4-4CD7-93AE-503C3E0B7A05",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "834192CC-585D-445E-B2AD-D73E9CDF3FED",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9D905B3F-094C-472C-AAAD-A4129282E942"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F019975D-3A45-4522-9CB9-F4258C371DF6"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12136AD8-9113-46B9-B6A9-0C330ABB05B9",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "829BA8C4-8E99-4338-817B-9F9FF37105BE",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100m_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF7DE9EC-0075-4655-A888-A4ED3DB002A8"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "200199EC-2819-4DE0-828C-0F56790CA1B4",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100wm_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9E03BDAC-9DF0-444D-B5C8-483892B31982"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "061A302C-8D35-4E80-93DA-916DA7E90C06"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E479E1A4-0F80-4FDC-8F9F-9E23A885179A",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "584863D2-B181-4CDF-8266-EEBA56A5AA85",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BADF97B2-33D0-4A28-BDFC-CBD3A235EF5F"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "140AF13E-4463-478B-AA94-97406A80CB86"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4288CD57-CDEE-4B03-8163-7CDDE7767914",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50C0D971-E2C4-4048-A08F-0A5D437866F8",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E998DFA-CE7F-4954-AB06-CBB15317C6A7"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1356861D-E6CA-4973-9597-629507E8C07E"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "12136AD8-9113-46B9-B6A9-0C330ABB05B9",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "430D9FAC-36E8-4AB0-85F2-88D7EF1F6B7A",
            "versionEndExcluding": "20.4.1",
            "versionStartIncluding": "20.4"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7",
            "versionEndExcluding": "20.5.1",
            "versionStartIncluding": "20.5"
          },
          {
            "criteria": "cpe:2.3:o:cisco:vedge_cloud_firmware:19.2.99:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C0D58D17-951F-446E-8004-A489E3A9725E"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "94999112-9EAA-4707-B002-F867D7628C49"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]
Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References
