CVE:CVE-2021-1241
CNNVD:CNNVD-202101-1620
Cisco SD-WAN vManage Software等都是美国思科（Cisco）公司的产品。Cisco SD-WAN vManage Software是一款用于SD-WAN（软件定义广域网络）解决方案的管理软件。Cisco SD-WAN vEdge Routers是一款路由器。Cisco SD-WAN Vbond Orchestrator Software是一款用于 Cisco vSmart Controllers 和 vEdge routers设备之间进行身份验证的软件。
多款 Cisco SD-WAN 产品中存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade cisco ios_xe_sd-wan to a higher version than -; Upgrade cisco sd-wan_firmware to a higher version than 18.3.5,18.3.8,18.4.1,18.4.4,18.4.5,19.2.0,19.2.1,19.2.2,19.2.99,20.1.0,and avoid the version 18.3.5,18.3.8,18.4.1,18.4.4,18.4.5,19.2.0,19.2.1,19.2.2,19.2.99,20.1.0; Upgrade cisco sd-wan_vsmart_controller_firmware to a higher version than *; Upgrade cisco sd-wan_vbond_orchestrator to a higher version than -; Upgrade cisco sd-wan_vmanage to a higher version than -