Vulnerabilitycritical

Cisco fixes critical flaws in SD

Security Affairsby @securityaffairsMay 6, 2021 · 06:25 UTC (May 6, 2021)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-1275 CVE-2021-1468 CVE-2021-1505 CVE-2021-1506 CVE-2021-1508 CVE-2021-1497 CVE-2021-1498 CVE-2021-1479

Tags: cve-2021-1275 cve-2021-1468 cve-2021-1505 cve-2021-1506 cve-2021-1508 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1468 +4 related CVEs CVE-2021-1505 CVE-2021-1508 CVE-2021-1275 CVE-2021-1506	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive…	9.8 group max	2%		May 6, 2021
CVE-2021-1479	Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated…	9.8	2%		Apr 8, 2021
CVE-2021-1498 +1 related CVE CVE-2021-1497	Command Injection in Cisco HyperFlex HX Data Platform / Installer VM	9.8	100%	KEVPoC	May 6, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Cisco fixed critical flaws in SD-WAN vManage and HyperFlex HX software that could allow creating admin accounts, and executing commands as root. Cisco has addressed critical vulnerabilities affecting SD-WAN vManage and HyperFlex HX software that could allow creating admin accounts and executing commands as root.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.