CVE-2021-1232

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected system. This vulnerability is due to insufficient access control for sensitive information that is written to an affected system. An attacker could exploit this vulnerability by accessing sensitive information that they are not authorized to access on an affected system. A successful exploit could allow the attacker to gain access to devices and other network management systems that they should not have access to.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-522

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipphone-rce-dos-U2PsSkz3Not Applicable
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwanvman-infodis1-YuQScHBVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ethernet-dos-HGXgJH8nNot Applicable
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-distupd-N87eB6Z3Not Applicable

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1226A vulnerability in the audit logging component of Cisco Unif…6.5
• CVE-2021-1227A vulnerability in the NX-API feature of Cisco NX-OS Softwar…8.1
• CVE-2021-1228A vulnerability in the fabric infrastructure VLAN connection…6.5
• CVE-2021-1229A vulnerability in ICMP Version 6 (ICMPv6) processing in Cis…5.3
• CVE-2021-1230A vulnerability with the Border Gateway Protocol (BGP) for C…7.5
• CVE-2021-1231A vulnerability in the Link Layer Discovery Protocol (LLDP) …4.7
• CVE-2021-1233A vulnerability in the CLI of Cisco SD-WAN Software could al…4.4
• CVE-2021-1234A vulnerability in the cluster management interface of Cisco…5.3
• CVE-2021-1235A vulnerability in the CLI of Cisco SD-WAN vManage Software …5.5
• CVE-2021-1236Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2021-1237A vulnerability in the Network Access Manager and Web Securi…7.8
• CVE-2021-1238Multiple vulnerabilities in the web-based management interfa…4.8