cnvd - cnvd-2021-15775

cnvd-2021-15775

Vulnerability from cnvd

Title: Cisco SD-WAN拒绝服务漏洞

Description:

Cisco SD-WAN vEdge是美国思科（Cisco）公司的是一款路由器。该设备可为思科SD-WAN解决方案提供基本WAN，安全性和多云功能。Cisco SD-WAN vManage是美国思科（Cisco）公司的一款可提供软件定义网络功能的软件。该软件为网络虚拟化的一种方式。

Cisco SD-WAN软件的符号链接（symlink）创建功能存在拒绝服务漏洞，该漏洞源于程序未对创建符号链接的输入进行正确验证检查，攻击者可通过在特定路径上创建指向目标文件的符号链接利用该漏洞覆盖受影响的系统上的root用户所拥有的任意文件。

Severity: 高

Patch Name: Cisco SD-WAN拒绝服务漏洞的补丁

Patch Description:

Cisco SD-WAN软件的符号链接（symlink）创建功能存在拒绝服务漏洞，该漏洞源于程序未对创建符号链接的输入进行正确验证检查，攻击者可通过在特定路径上创建指向目标文件的符号链接利用该漏洞覆盖受影响的系统上的root用户所拥有的任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已提供漏洞修补方案，请关注厂商主页及时更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-1278

Impacted products

Name
['Cisco SD-WAN vManage Software null', 'Cisco SD-WAN vEdge Routers null', 'Cisco SD-WAN vSmart Controller null', 'Cisco SD-WAN vBond Orchestrator null', 'Cisco SD-WAN vEdge Cloud Routers null']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-1278",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-1278"
    }
  },
  "description": "Cisco SD-WAN vEdge\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u662f\u4e00\u6b3e\u8def\u7531\u5668\u3002\u8be5\u8bbe\u5907\u53ef\u4e3a\u601d\u79d1SD-WAN\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\u57fa\u672cWAN\uff0c\u5b89\u5168\u6027\u548c\u591a\u4e91\u529f\u80fd\u3002Cisco SD-WAN vManage\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u53ef\u63d0\u4f9b\u8f6f\u4ef6\u5b9a\u4e49\u7f51\u7edc\u529f\u80fd\u7684\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u4e3a\u7f51\u7edc\u865a\u62df\u5316\u7684\u4e00\u79cd\u65b9\u5f0f\u3002\n\nCisco SD-WAN\u8f6f\u4ef6\u7684\u7b26\u53f7\u94fe\u63a5\uff08symlink\uff09\u521b\u5efa\u529f\u80fd\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\u7684\u8f93\u5165\u8fdb\u884c\u6b63\u786e\u9a8c\u8bc1\u68c0\u67e5\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5728\u7279\u5b9a\u8def\u5f84\u4e0a\u521b\u5efa\u6307\u5411\u76ee\u6807\u6587\u4ef6\u7684\u7b26\u53f7\u94fe\u63a5\u5229\u7528\u8be5\u6f0f\u6d1e\u8986\u76d6\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u7684root\u7528\u6237\u6240\u62e5\u6709\u7684\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-15775",
  "openTime": "2021-03-09",
  "patchDescription": "Cisco SD-WAN vEdge\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u662f\u4e00\u6b3e\u8def\u7531\u5668\u3002\u8be5\u8bbe\u5907\u53ef\u4e3a\u601d\u79d1SD-WAN\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\u57fa\u672cWAN\uff0c\u5b89\u5168\u6027\u548c\u591a\u4e91\u529f\u80fd\u3002Cisco SD-WAN vManage\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u53ef\u63d0\u4f9b\u8f6f\u4ef6\u5b9a\u4e49\u7f51\u7edc\u529f\u80fd\u7684\u8f6f\u4ef6\u3002\u8be5\u8f6f\u4ef6\u4e3a\u7f51\u7edc\u865a\u62df\u5316\u7684\u4e00\u79cd\u65b9\u5f0f\u3002\r\n\r\nCisco SD-WAN\u8f6f\u4ef6\u7684\u7b26\u53f7\u94fe\u63a5\uff08symlink\uff09\u521b\u5efa\u529f\u80fd\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\u7684\u8f93\u5165\u8fdb\u884c\u6b63\u786e\u9a8c\u8bc1\u68c0\u67e5\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5728\u7279\u5b9a\u8def\u5f84\u4e0a\u521b\u5efa\u6307\u5411\u76ee\u6807\u6587\u4ef6\u7684\u7b26\u53f7\u94fe\u63a5\u5229\u7528\u8be5\u6f0f\u6d1e\u8986\u76d6\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u4e0a\u7684root\u7528\u6237\u6240\u62e5\u6709\u7684\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco SD-WAN\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco SD-WAN vManage Software null",
      "Cisco SD-WAN vEdge Routers null",
      "Cisco SD-WAN vSmart Controller null",
      "Cisco SD-WAN vBond Orchestrator null",
      "Cisco SD-WAN vEdge Cloud Routers null"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-1278",
  "serverity": "\u9ad8",
  "submitTime": "2021-01-22",
  "title": "Cisco SD-WAN\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2021-1278 (GCVE-0-2021-1278)

Vulnerability from cvelistv5

Published

2021-01-20 19:56

Modified

2024-11-12 20:25

Severity ?

8.6 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-119

Summary

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP	vendor-advisory, x_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco	Cisco SD-WAN Solution	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T16:02:56.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20210120 Cisco SD-WAN Denial of Service Vulnerabilities",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-1278",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-08T20:05:59.298624Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-12T20:25:12.150Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco SD-WAN Solution",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2021-01-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-20T19:56:27",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20210120 Cisco SD-WAN Denial of Service Vulnerabilities",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP"
        }
      ],
      "source": {
        "advisory": "cisco-sa-sdwan-dosmulti-48jJuEUP",
        "defect": [
          [
            "CSCvq20708",
            "CSCvt11522",
            "CSCvt11523",
            "CSCvt11530",
            "CSCvu28409",
            "CSCvu31763"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco SD-WAN Denial of Service Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2021-01-20T16:00:00",
          "ID": "CVE-2021-1278",
          "STATE": "PUBLIC",
          "TITLE": "Cisco SD-WAN Denial of Service Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco SD-WAN Solution",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "8.6",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20210120 Cisco SD-WAN Denial of Service Vulnerabilities",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-sdwan-dosmulti-48jJuEUP",
          "defect": [
            [
              "CSCvq20708",
              "CSCvt11522",
              "CSCvt11523",
              "CSCvt11530",
              "CSCvu28409",
              "CSCvu31763"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2021-1278",
    "datePublished": "2021-01-20T19:56:27.964347Z",
    "dateReserved": "2020-11-13T00:00:00",
    "dateUpdated": "2024-11-12T20:25:12.150Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted