CVE-2021-1491

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device. This vulnerability is due to insufficient file scope limiting. An attacker could exploit this vulnerability by creating a specific file reference on the file system and then accessing it through the web-based management interface. A successful exploit could allow the attacker to read arbitrary files from the file system of the underlying operating system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-59

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-info-disclos-gGvm9MfuVendor Advisory

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1485A vulnerability in the CLI of Cisco IOS XR Software could al…7.8
• CVE-2021-1486A vulnerability in Cisco SD-WAN vManage Software could allow…5.3
• CVE-2021-1487A vulnerability in the web-based management interface of Cis…8.8
• CVE-2021-1488A vulnerability in the upgrade process of Cisco Adaptive Sec…6.7
• CVE-2021-1489A vulnerability in filesystem usage management for Cisco Fir…6.5
• CVE-2021-1490A vulnerability in the web-based management interface of Cis…6.1
• CVE-2021-1492The Duo Authentication Proxy installer prior to 5.2.1 did no…7.1
• CVE-2021-1493A vulnerability in the web services interface of Cisco Adapt…7.1
• CVE-2021-1494Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2021-1495Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2021-1496Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1497Multiple vulnerabilities in the web-based management interfa…9.8