✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert – Lazarus APT Group – Active IOCs

July 8, 2021
Rewterz

Rewterz Threat Advisory – Multiple Vulnerabilities in FortiMail

July 8, 2021

Rewterz Threat Advisory – CVE-2021-1234 – Cisco SD-WAN vManage Software Information Disclosure Vulnerability

Severity

Medium

Analysis Summary

CVE-2021-1234

A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the vManage software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to view sensitive information on the affected system.

Impact

  • Information Disclosure
  • Unauthorized Access

Affected Vendors

Cisco

Affected Products

  • Cisco SD-WAN vManage Software Release 20.5.1
  • Cisco SD-WAN vManage Software Earlier than Release 20.3.1 as well as releases 20.3.2 and 20.3.3
  • Cisco SD-WAN vManage Software Earlier than Release 20.4.1 as well as releases 20.4.1.2 and 20.4.2

Remediation

Refer to Cisco Security Advisory for the patch, upgrade, or suggested workaround information.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmaninfdis3-OvdR6uu8

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo