CVE-2021-1513
moderate-risk
Published 2021-05-06
A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Do I need to act?
-
0.82% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10
High
NETWORK
/ LOW complexity
Affected Products (12)
Vsmart Controller Firmware
Vedge 100 Firmware
Vedge 1000 Firmware
Vedge 100B Firmware
Vedge 100M Firmware
Vedge 100Wm Firmware
Vedge 2000 Firmware
Vedge 5000 Firmware
Vedge-100B Firmware
Vedge Cloud Firmware
Affected Vendors
References (2)
46
/ 100
moderate-risk
Severity
26/34 · High
Exploitability
3/34 · Minimal
Exposure
17/34 · Moderate