Main
Vulnerability Database
Exploits
ID:6586 - Exploit for Permissions, Privileges, and Access Controls in Cisco SD-WAN vManage - CVE-2021-1480
ID:6586 - Exploit for Permissions, Privileges, and Access Controls in Cisco SD-WAN vManage - CVE-2021-1480
Published: July 29, 2021
Vulnerability identifier: #VU51978
Vulnerability risk: Low
CVE-ID: CVE-2021-1480
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
Cisco SD-WAN vManage
Cisco SD-WAN vManage
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper validation of input to the system file transfer functions. A local user can send a specially crafted request, overwrite arbitrary files and modify the system to gain elevated privileges on the system.
Remediation
Install updates from vendor's website.