CVE-2021-34700 Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Medium 5.5 Published 22 Jul 2021 Updated 7 Nov 2024

An authenticated local attacker can read arbitrary files to forge authentication requests and gain unauthorized access to the web UI.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-34700?

CVE-2021-34700 is a medium-severity vulnerability in Cisco Catalyst Sd-Wan Manager, published on 22 Jul 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficiently controlled. An attacker could exploit this vulnerability by gaining unauthorized access to sensitive information on an affected system. A successful exploit could allow the attacker to create forged authentication requests and gain unauthorized access to the web UI of an affected system.

Weakness: CWE-522

Which versions are affected by CVE-2021-34700?

It affects 2 products.

Products include Cisco Catalyst Sd-Wan Manager, Cisco Sd-Wan Vmanage.

How do I fix CVE-2021-34700?

No fix has been published for CVE-2021-34700 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-34700 being exploited?

There is no known exploitation of CVE-2021-34700 in the wild and no public exploit code.

All Cisco Catalyst Sd-Wan Manager vulnerabilities

Sources

Also known as GHSA-m8ph-774q-fv98.