CVE-2021-34727

Critical

Description

A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. A successful exploit could allow the attacker to cause a buffer overflow and possibly execute arbitrary commands with root-level privileges, or cause the device to reload, which could result in a denial of service condition.

SeverityCritical
CVSS9.8
Exploit probability—
ProductCisco Ios Xe Sd-wan
PublishedSep 23, 2021
First seenSep 23, 2021
Weakness typeCWE-120CWE-120

How to fix

Affected products

ProductAffected versionsFixed in
cisco ios_xe_sd-wanNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-34727 · Cisco Ios Xe Sd-wan · Dark Radar