High severity8.8NVD Advisory· Published Jan 20, 2021· Updated Jun 17, 2026

CVE-2021-1305

Description

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./SD-WAN vManage Softwarellm-fuzzy
Cisco Systems, Inc./Sd Wan Vmanagecpe-rescue
Range: n/a
Cisco Systems, Inc./Ios Xe Sd Wan
cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*
Cisco Systems, Inc./Sd Wan Firmware2 versions
cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*range: <20.3.2
- cpe:2.3:o:cisco:sd-wan_firmware:20.4.0:*:*:*:*:*:*:*
Cisco Systems, Inc./Sd Wan Vsmart Controller Firmware
cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*
Cisco Systems, Inc./Sd Wan Vbond Orchestrator
cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrSnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000