CVE-2021-1470

Summary

CVE-2021-1470 is a vulnerability affecting the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker can exploit this issue by sending malicious SQL queries, leading to SQL injection attacks. The flaw arises from inadequate input validation of SQL queries, potentially enabling attackers to modify database values or retrieve sensitive information from the vManage database or underlying operating system. Cisco has released software updates to mitigate these vulnerabilities. No workarounds are currently available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.