{
  "id": "CVE-2021-1528",
  "sourceIdentifier": "psirt@cisco.com",
  "published": "2021-06-04T17:15:09.020",
  "lastModified": "2024-11-21T05:44:33.277",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system. This vulnerability exists because the affected software does not properly restrict access to privileged processes. An attacker could exploit this vulnerability by invoking a privileged process in the affected system. A successful exploit could allow the attacker to perform actions with the privileges of the root user."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la CLI del Software Cisco SD-WAN, podr\u00eda permitir a un atacante local autenticado alcanzar privilegios elevados en un sistema afectado. Esta vulnerabilidad se presenta porque el software afectado no restringe apropiadamente el acceso a los procesos con privilegios. Un atacante podr\u00eda explotar esta vulnerabilidad al invocar un proceso privilegiado en el sistema afectado. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante llevar a cabo acciones con los privilegios del usuario root"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "psirt@cisco.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      },
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "availabilityImpact": "COMPLETE"
        },
        "baseSeverity": "HIGH",
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "psirt@cisco.com",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "0ABABC6A-BE28-4107-A00F-E6D8841168F5"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "C8099190-F1EC-4AFC-9607-5F13E09B7C26"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "3079495E-BB87-48EF-92F2-5C0DFBBDFB2D"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:vsmart_controller:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "A234D95C-0AC1-4183-8457-550932E10B7E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:vsmart_controller:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "9E3634B4-6146-4DF5-B242-6606F6CCBA00"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "4E75BF8E-8BA5-4A53-9CE9-F10CC245FFC3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "B89D5AE2-3ED3-4C57-AF93-E9750D38F029"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "6916F5F8-4E5B-4878-9C08-430F30EB61FD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "834192CC-585D-445E-B2AD-D73E9CDF3FED"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F019975D-3A45-4522-9CB9-F4258C371DF6"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "1D0C212A-DDCE-4D44-8D2A-8A7DEC4C30E2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "C7B4CFA5-743E-4A04-9FED-CB9A5F587192"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "DA09C6C5-B770-4C42-8DE0-4482D7FC5512"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "061A302C-8D35-4E80-93DA-916DA7E90C06"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "E609583F-9F2E-435A-88A3-77950F3825BD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "584863D2-B181-4CDF-8266-EEBA56A5AA85"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "140AF13E-4463-478B-AA94-97406A80CB86"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "39F5B972-D194-4333-BEF6-129BEBB61E9E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "50C0D971-E2C4-4048-A08F-0A5D437866F8"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1356861D-E6CA-4973-9597-629507E8C07E"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "1D0C212A-DDCE-4D44-8D2A-8A7DEC4C30E2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.4",
              "versionEndExcluding": "20.4.2",
              "matchCriteriaId": "E8696F30-DB2C-46D8-99BF-68A3D3AC0988"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "20.5",
              "versionEndExcluding": "20.5.1",
              "matchCriteriaId": "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "94999112-9EAA-4707-B002-F867D7628C49"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-fuErCWwF",
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-fuErCWwF",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}