CVE-2021-1284 (CNNVD-202105-146)
中文标题:
Cisco SD-WAN vManage Software 安全漏洞
英文标题:
Cisco SD-WAN vManage Software Authentication Bypass Vulnerability
漏洞描述
中文描述:
Cisco SD-WAN vManage Software是美国思科（Cisco）公司的一款用于SD-WAN（软件定义广域网络）解决方案的管理软件。 Cisco SD-WAN vManage Software 存在安全漏洞，未经身份验证的相邻攻击者可利用该漏洞绕过身份验证和授权，并修改受影响系统的配置。
英文描述:
A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass authentication and authorization and modify the configuration of an affected system. To exploit this vulnerability, the attacker must be able to access an associated Cisco SD-WAN vEdge device. This vulnerability is due to insufficient authorization checks. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based messaging service interface of an affected system. A successful exploit could allow the attacker to gain unauthenticated read and write access to the affected vManage system. With this access, the attacker could access information about the affected vManage system, modify the configuration of the system, or make configuration changes to devices that are managed by the system.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco SD-WAN vManage | n/a | - | - |
cpe:2.3:a:cisco:cisco_sd-wan_vmanage:n_a:*:*:*:*:*:*:*
|
| cisco | catalyst_sd-wan_manager | * | - | - |
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
|
| cisco | sd-wan_vmanage | * | - | - |
cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2021-1284 |
2025-11-11 15:20:45 | 2025-11-11 07:36:33 |
| NVD | nvd_CVE-2021-1284 |
2025-11-11 14:57:36 | 2025-11-11 07:44:55 |
| CNNVD | cnnvd_CNNVD-202105-146 |
2025-11-11 15:10:38 | 2025-11-11 07:56:44 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202105-146
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 3
- data_sources: ['cve'] -> ['cve', 'nvd']