CVE-2021-1491

Summary

CVE-2021-1491 is a vulnerability affecting the web-based management interface of Cisco SD-WAN vManage Software. An authenticated, remote attacker can exploit this insufficient file scope limiting issue to read arbitrary files on the underlying file system of the device. By creating a specific file reference and accessing it through the interface, an attacker could gain unauthorized access to files on the operating system. This vulnerability poses a significant risk, as it allows for the leakage of sensitive information. Cisco has released software updates to address the issue, and there are currently no workarounds available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.