CVE-2021-1462 Cisco SD-WAN vManage Software Privilege Escalation Vulnerability

Medium 4.4 Published 18 Nov 2024 Updated 18 Nov 2024

An authenticated local attacker with Administrator access can escalate privileges to root by creating a malicious file parsed by the system.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-1462?

CVE-2021-1462 is a medium-severity vulnerability in Cisco Catalyst Sd-Wan Manager, published on 18 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a valid Administrator account on an affected system. The vulnerability is due to incorrect privilege assignment. An attacker could exploit this vulnerability by logging in to an affected system with an Administrator account and creating a malicious file, which the system would parse at a later time. A successful exploit could allow the attacker to obtain root privileges on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Weakness: CWE-20

Which versions are affected by CVE-2021-1462?

It affects 1 product.

Products include Cisco Catalyst Sd-Wan Manager.

How do I fix CVE-2021-1462?

No fix has been published for CVE-2021-1462 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-1462 being exploited?

There is no known exploitation of CVE-2021-1462 in the wild and no public exploit code.

All Cisco Catalyst Sd-Wan Manager vulnerabilities

Sources

Also known as GHSA-g2fp-6w5h-9c47.