CVE-2021-1235

A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system. The vulnerability is due to insufficient user authorization. An attacker could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read database files from the filesystem of the underlying operating system.

• CWE-497

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58djVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58djVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1229A vulnerability in ICMP Version 6 (ICMPv6) processing in Cis…5.3
• CVE-2021-1230A vulnerability with the Border Gateway Protocol (BGP) for C…7.5
• CVE-2021-1231A vulnerability in the Link Layer Discovery Protocol (LLDP) …4.7
• CVE-2021-1232A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1233A vulnerability in the CLI of Cisco SD-WAN Software could al…4.4
• CVE-2021-1234A vulnerability in the cluster management interface of Cisco…5.3
• CVE-2021-1236Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2021-1237A vulnerability in the Network Access Manager and Web Securi…7.8
• CVE-2021-1238Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1239Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2021-1240A vulnerability in the loading process of specific DLLs in C…7.3
• CVE-2021-1241Multiple vulnerabilities in Cisco SD-WAN products could allo…7.5