CVE-2021-1431

HIGH

Cisco IOS XE SD-WAN - Unauthenticated Denial of Service via Malformed Packet Handling

Title source: llm

Description

A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwdos-4zeEeC9w

Scores

CVSS v3 7.5

EPSS 0.0038

EPSS Percentile 59.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (32)

cisco/ios_xe 3.15.1xbs

cisco/ios_xe 3.15.2xbs

cisco/ios_xe 16.11.1

cisco/ios_xe 16.11.1a

cisco/ios_xe 16.11.1b

cisco/ios_xe 16.11.1c

cisco/ios_xe 16.11.1s

cisco/ios_xe 16.11.2

cisco/ios_xe 16.12.1

cisco/ios_xe 16.12.1a

... and 22 more

Published Mar 24, 2021

Tracked Since Feb 18, 2026