CVE-2021-1241: Cisco SD-WAN Denial of Service Vulnerabilities

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-20 · updated 2026-06-17
Weakness: CWE-119

Description

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

Cisco Catalyst SD-WAN Manager: all versions
Cisco IOS XE SD-WAN Software: all versions
Cisco SD-WAN vManage: 18.3.5, 18.3.8, 18.4.1, 18.4.4, 18.4.5, 19.2.0 (+4)
Cisco Sd-Wan Vbond Orchestrator: all versions
Cisco Sd-Wan Vsmart Controller Firmware: all versions

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP

Get alerted when CVE-2021-1241 or the next vulnerability affects your stack