What’s Vulnerable › Vulnerabilities

CVE-2021-1300: Cisco SD-WAN Buffer Overflow Vulnerabilities

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-20 · updated 2026-06-17
• Weakness: CWE-119

Description

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Catalyst SD-WAN Manager: all versions
• Cisco IOS XE SD-WAN Software: all versions
• Cisco SD-WAN vManage: 18.3.8, 18.4.4, 19.2.1, 19.2.99
• Cisco Sd-Wan Vbond Orchestrator: all versions
• Cisco Sd-Wan Vsmart Controller Firmware: all versions

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj

Get alerted when CVE-2021-1300 or the next vulnerability affects your stack