CVE:CVE-2021-1528
CNNVD:CNNVD-202106-122
Cisco SD-WAN Solution是美国思科（Cisco）公司的一套网络扩展解决方案。
Cisco SD-WAN Software 存在安全漏洞，该漏洞允许经过身份验证的本地攻击者在受影响的系统上获得更高的特权。
solution:Upgrade cisco sd-wan_vbond_orchestrator to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco sd-wan_vmanage to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vsmart_controller to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_100_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_1000_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_100b_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_100m_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_100wm_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_2000_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_5000_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1); Upgrade cisco vedge_cloud_firmware to a higher version than 20.4.2,20.5.1,and avoid the version [20.4,20.4.2),[20.5,20.5.1)