CVE-2021-1234

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to view sensitive information on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-497

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmaninfdis3-OvdR6uu8Vendor Advisory

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1228A vulnerability in the fabric infrastructure VLAN connection…6.5
• CVE-2021-1229A vulnerability in ICMP Version 6 (ICMPv6) processing in Cis…5.3
• CVE-2021-1230A vulnerability with the Border Gateway Protocol (BGP) for C…7.5
• CVE-2021-1231A vulnerability in the Link Layer Discovery Protocol (LLDP) …4.7
• CVE-2021-1232A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1233A vulnerability in the CLI of Cisco SD-WAN Software could al…4.4
• CVE-2021-1235A vulnerability in the CLI of Cisco SD-WAN vManage Software …5.5
• CVE-2021-1236Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2021-1237A vulnerability in the Network Access Manager and Web Securi…7.8
• CVE-2021-1238Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1239Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1240A vulnerability in the loading process of specific DLLs in C…7.3