Medium severity5.3NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026

CVE-2021-1486

Description

A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A successful exploit could allow the attacker to compare the HTTP responses that are returned by the affected system to determine which accounts are valid user accounts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./SD-WAN vManage Softwarellm-fuzzy
Cisco Systems, Inc./Sd Wan Vmanagecpe-rescue2 versions
n/a+ 1 more
- (no CPE)range: n/a
- cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*range: <20.3.3
Cisco Systems, Inc./Catalyst SD-WAN Manager
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
Range: >=20.4,<20.4.1

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-enumeration-64eNnDKynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000