CVE:CVE-2021-1298
CNNVD:CNNVD-202101-1624
Cisco SD-WAN vManage Software等都是美国思科（Cisco）公司的产品。Cisco SD-WAN vManage Software是一款用于SD-WAN（软件定义广域网络）解决方案的管理软件。Cisco SD-WAN vEdge Routers是一款路由器。Cisco SD-WAN Vbond Orchestrator Software是一款用于 Cisco vSmart Controllers 和 vEdge routers设备之间进行身份验证的软件。
多款 Cisco SD-WAN 产品存在命令注入漏洞，攻击者可利用该漏洞在设备上的root特权执行恶意操作。
solution:Upgrade cisco sd-wan_firmware to a higher version than 18.2.0,18.3.0,18.3.8,18.4.6,19.2.3,19.2.99,20.1.0,and avoid the version 18.2.0,18.3.0,18.3.8,18.4.6,19.2.3,19.2.99,20.1.0; Upgrade cisco sd-wan_vsmart_controller_firmware to a higher version than *; Upgrade cisco sd-wan_vbond_orchestrator to a higher version than -; Upgrade cisco sd-wan_vmanage to a higher version than -