CVE:CVE-2021-1514
CNNVD:CNNVD-202105-144
Cisco SD-WAN vManage是美国思科（Cisco）公司的一款可提供软件定义网络功能的软件。该软件为网络虚拟化的一种方式。
Cisco SD-WAN vManage 存在操作系统命令注入漏洞，本地攻击者可利用该漏洞注入任意命令以执行该漏洞是由于某些CLI命令的输入验证不足造成的。
solution:Upgrade cisco sd-wan_vbond_orchestrator to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco sd-wan_vmanage to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vsmart_controller_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_100_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_1000_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_100b_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_100m_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_100wm_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_2000_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_5000_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge-100b_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1); Upgrade cisco vedge_cloud_firmware to a higher version than 18.3,20.1.1,20.3.1,20.4.1,20.5.1,and avoid the version (,18.3),[20.1,20.1.1),[20.3,20.3.1),[20.4,20.4.1),[20.5,20.5.1)