CVE-2021-1484

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary commands on an affected system and cause a denial of service (DoS) condition. This vulnerability is due to improper input validation of user-supplied input to the device template configuration. An attacker could exploit this vulnerability by submitting crafted input to the device template configuration. A successful exploit could allow the attacker to cause a DoS condition on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-88

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-cmdinj-nRHKgfHXVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9MfuNot Applicable

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1478A vulnerability in the Java Management Extensions (JMX) comp…6.5
• CVE-2021-1479Multiple vulnerabilities in Cisco SD-WAN vManage Software co…9.8
• CVE-2021-1480Multiple vulnerabilities in Cisco SD-WAN vManage Software co…7.8
• CVE-2021-1481A vulnerability in the web-based management interface of Cis…4.3
• CVE-2021-1482A vulnerability in the web-based management interface of Cis…6.4
• CVE-2021-1483A vulnerability in the web UI of Cisco SD-WAN vManage S…6.4
• CVE-2021-1485A vulnerability in the CLI of Cisco IOS XR Software could al…7.8
• CVE-2021-1486A vulnerability in Cisco SD-WAN vManage Software could allow…5.3
• CVE-2021-1487A vulnerability in the web-based management interface of Cis…8.8
• CVE-2021-1488A vulnerability in the upgrade process of Cisco Adaptive Sec…6.7
• CVE-2021-1489A vulnerability in filesystem usage management for Cisco Fir…6.5
• CVE-2021-1490A vulnerability in the web-based management interface of Cis…6.1