CVE:CVE-2021-1305
CNNVD:CNNVD-202101-1533
Cisco SD-WAN vManage Software是美国思科（Cisco）公司的一款用于SD-WAN（软件定义广域网络）解决方案的管理软件。
Cisco SD-WAN vManage Software 的 web-based management interface 存在输入验证错误漏洞，该漏洞允许经过身份验证的远程攻击者可利用该漏洞绕过授权，修改受影响系统的配置，访问敏感信息，并查看他们未被授权访问的信息。
solution:Upgrade cisco ios_xe_sd-wan to a higher version than -; Upgrade cisco sd-wan_firmware to a higher version than 20.3.2,20.4.0,and avoid the version (,20.3.2),20.4.0; Upgrade cisco sd-wan_vsmart_controller_firmware to a higher version than *; Upgrade cisco sd-wan_vbond_orchestrator to a higher version than -
solution:Upgrade apple ipados to a higher version than 14.4,and avoid the version (,14.4); Upgrade apple iphone_os to a higher version than 14.4,and avoid the version (,14.4); Upgrade apple mac_os_x to a higher version than 10.14.6,10.15.7,10.14.6,10.14.6:security_update_2019-001,10.14.6:security_update_2019-002,10.14.6:security_update_2019-006,10.14.6:security_update_2019-007,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:security_update_2020-007,10.14.6:supplemental_update,10.14.6:supplemental_update_2,10.15.7,10.15.7:security_update_2020-001,10.15.7:supplemental_update,and avoid the version [10.14,10.14.6),[10.15,10.15.7),10.14.6,10.14.6:security_update_2019-001,10.14.6:security_update_2019-002,10.14.6:security_update_2019-006,10.14.6:security_update_2019-007,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:security_update_2020-007,10.14.6:supplemental_update,10.14.6:supplemental_update_2,10.15.7,10.15.7:security_update_2020-001,10.15.7:supplemental_update; Upgrade apple macos to a higher version than 11.2,and avoid the version [11.0,11.2)