{"id":"CVE-2021-1431","published":"2021-03-24T20:05:15Z","modified":"2024-11-08T23:36:36Z","title":"Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability","vendor":"Cisco","product":"Cisco IOS XE Software","tier":"tail","description":{"text":"A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01658,"percentile":0.76548,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwdos-4zeEeC9w","tags":["vendor-advisory","x_refsource_CISCO"]}],"priority":{"score":20.6,"factors":[{"name":"EPSS percentile","points":15.31},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"cisco","euvd":{"id":"EUVD-2021-6898","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-cisco-ios-xe-cwe-20"}}