CVE-2021-34727
A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. A successful exploit could allow the attacker to cause a buffer overflow and possibly execute arbitrary commands with root-level privileges, or cause the device to reload, which could result in a denial of service condition.
Published:Sep 23, 2021
Last Modified:Nov 21, 2024
EPS:Sep 23, 2021
EPSS Score:0.01
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
1000 Integrated Services Router
Cisco
1000 Integrated Services Router
Vendor
Cisco
Product
1100-4g\/6g Integrated Services Router
Cisco
1100-4g\/6g Integrated Services Router
Vendor
Cisco
Product
1100-4p Integrated Services Router
Cisco
1100-4p Integrated Services Router
Vendor
Cisco
Product
1100-8p Integrated Services Router
Cisco
1100-8p Integrated Services Router
Vendor
Cisco
Product
1100 Integrated Services Router
Cisco
1100 Integrated Services Router
Vendor
Cisco
Product
1101-4p Integrated Services Router
Cisco
1101-4p Integrated Services Router
Vendor
Cisco
Product
1101 Integrated Services Router
Cisco
1101 Integrated Services Router
Vendor
Cisco
Product
1109-2p Integrated Services Router
Cisco
1109-2p Integrated Services Router
Vendor
Cisco
Product
1109-4p Integrated Services Router
Cisco
1109-4p Integrated Services Router
Vendor
Cisco
Product
1109 Integrated Services Router
Cisco
1109 Integrated Services Router
Vendor
Cisco
Product
1111x-8p Integrated Services Router
Cisco
1111x-8p Integrated Services Router
Vendor
Cisco
Product
1111x Integrated Services Router
Cisco
1111x Integrated Services Router
Vendor
Cisco
Product
111x Integrated Services Router
Cisco
111x Integrated Services Router
Vendor
Cisco
Product
1120 Integrated Services Router
Cisco
1120 Integrated Services Router
Vendor
Cisco
Product
1160 Integrated Services Router
Cisco
1160 Integrated Services Router
Vendor
Cisco
Product
4000 Integrated Services Router
Cisco
4000 Integrated Services Router
Vendor
Cisco
Product
4221 Integrated Services Router
Cisco
4221 Integrated Services Router
Vendor
Cisco
Product
422 Integrated Services Router
Cisco
422 Integrated Services Router
Vendor
Cisco
Product
4321 Integrated Services Router
Cisco
4321 Integrated Services Router
Vendor
Cisco
Product
4331 Integrated Services Router
Cisco
4331 Integrated Services Router
Vendor
Cisco
Product
4351 Integrated Services Router
Cisco
4351 Integrated Services Router
Vendor
Cisco
Product
4431 Integrated Services Router
Cisco
4431 Integrated Services Router
Vendor
Cisco
Product
4451-x Integrated Services Router
Cisco
4451-x Integrated Services Router
Vendor
Cisco
Product
4451 Integrated Services Router
Cisco
4451 Integrated Services Router
Vendor
Cisco
Product
4461 Integrated Services Router
Cisco
4461 Integrated Services Router
Vendor
Cisco
Product
Asr 1000
Cisco
Asr 1000
Vendor
Cisco
Product
Asr 1000-esp100
Cisco
Asr 1000-esp100
Vendor
Cisco
Product
Asr 1000-x
Cisco
Asr 1000-x
Vendor
Cisco
Product
Asr 1000 Series
Cisco
Asr 1000 Series
Vendor
Cisco
Product
Asr 1000 Series Route Processor \(rp2\)
Cisco
Asr 1000 Series Route Processor \(rp2\)
Vendor
Cisco
Product
Asr 1000 Series Route Processor \(rp3\)
Cisco
Asr 1000 Series Route Processor \(rp3\)
Vendor
Cisco
Product
Asr 1001
Cisco
Asr 1001
Vendor
Cisco
Product
Asr 1001-hx
Cisco
Asr 1001-hx
Vendor
Cisco
Product
Asr 1001-hx R
Cisco
Asr 1001-hx R
Vendor
Cisco
Product
Asr 1001-x
Cisco
Asr 1001-x
Vendor
Cisco
Product
Asr 1001-x R
Cisco
Asr 1001-x R
Vendor
Cisco
Product
Asr 1002
Cisco
Asr 1002
Vendor
Cisco
Product
Asr 1002-hx
Cisco
Asr 1002-hx
Vendor
Cisco
Product
Asr 1002-hx R
Cisco
Asr 1002-hx R
Vendor
Cisco
Product
Asr 1002-x
Cisco
Asr 1002-x
Vendor
Cisco
Product
Asr 1002-x R
Cisco
Asr 1002-x R
Vendor
Cisco
Product
Asr 1004
Cisco
Asr 1004
Vendor
Cisco
Product
Asr 1006
Cisco
Asr 1006
Vendor
Cisco
Product
Asr 1006-x
Cisco
Asr 1006-x
Vendor
Cisco
Product
Asr 1009-x
Cisco
Asr 1009-x
Vendor
Cisco
Product
Asr 1013
Cisco
Asr 1013
Vendor
Cisco
Product
Asr 1023
Cisco
Asr 1023
Vendor
Cisco
Product
Csr 1000v
Cisco
Csr 1000v
Vendor
Cisco
Product
Ios Xe Sd-wan
Cisco
Ios Xe Sd-wan
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
