CVE-2021-1433 Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability

High 8.1 Published 24 Mar 2021 Updated 8 Nov 2024

A remote attacker with man-in-the-middle position can trigger a buffer overflow in vDaemon, potentially executing arbitrary code as root or causing a device reload.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-1433?

CVE-2021-1433 is a high-severity memory corruption vulnerability in Cisco Ios Xe, published on 24 Mar 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when the device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. The attacker must have a man-in-the-middle position between Cisco vManage and an associated device that is running an affected version of Cisco IOS XE SD-WAN Software. An exploit could allow the attacker to conduct a controllable buffer overflow attack (and possibly execute arbitrary commands as the root user) or cause a device reload, resulting in a denial of service (DoS) condition.

Weakness: CWE-119

Which versions are affected by CVE-2021-1433?

It affects 1 product.

Products include Cisco Ios Xe.

How do I fix CVE-2021-1433?

No fix has been published for CVE-2021-1433 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2021-1433 being exploited?

There is no known exploitation of CVE-2021-1433 in the wild and no public exploit code.

All Cisco Ios Xe vulnerabilities

Sources

Also known as GHSA-m47p-2p8x-qmpg.