CVE-2021-1262
Assigner: cisco
Published: 2021-01-20T00:00:00
State: PUBLISHED
affected: product: Cisco SD-WAN Solution 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-01-20T00:00:00
descriptions: value: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. 
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
version: 3.0
problemTypes: descriptions: cweId: CWE-20
description: CWE-20
type: CWE
source: advisory: cisco-sa-sdwan-cmdinjm-9QMSmgcn
defect: CSCvi59635
CSCvi59639
CSCvi69982
CSCvm26011
CSCvu28387
CSCvu28443
discovery: INTERNAL
title: Cisco SD-WAN Command Injection Vulnerabilities