CVE:CVE-2021-1261
CNNVD:CNNVD-202101-1555
Cisco SD-WAN vEdge Routers等都是美国思科（Cisco）公司的产品。Cisco SD-WAN vEdge Routers是一款路由器。Cisco SD-WAN Vbond Orchestrator Software是一款用于 Cisco vSmart Controllers 和 vEdge routers设备之间进行身份验证的软件。Cisco SD-WAN vEdge Cloud Routers是一款可为云环境中提供虚拟路由功能的服务。
多款 Cisco SD-WAN 产品存在注入漏洞，该漏洞允许经过身份验证的攻击者对受影响的设备执行命令注入攻击。
solution:Upgrade cisco sd-wan_firmware to a higher version than 18.2.0,18.3.0,18.3.8,18.4.6,19.2.3,19.2.99,20.1.0,and avoid the version 18.2.0,18.3.0,18.3.8,18.4.6,19.2.3,19.2.99,20.1.0; Upgrade cisco sd-wan_vsmart_controller_firmware to a higher version than *; Upgrade cisco sd-wan_vbond_orchestrator to a higher version than -; Upgrade cisco sd-wan_vmanage to a higher version than -