{"id":"CVE-2021-1278","title":"Cisco SD-WAN Denial of Service Vulnerabilties","summary":"Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.\r\n\r\nFor more information about these vulnerabilities, see the Details […","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvssSource":"vendor","vendor":"Cisco","product":"Cisco 4000 Series Integrated Services Routers","affected":["sd_wan_vedge_router","sd_wan_vedge_cloud","1000_series_integrated_services_routers","asr_1000_series_aggregation_services_routers","4000_series_integrated_services_routers","integrated_services_virtual_router","cloud_services_router_1000v_series","catalyst_ir1100_rugged_series_routers","ios_xe_software"],"published":"2021-01-20","updated":"2021-02-02","sourceUpdated":"2021-02-02T22:21:54+00:00","source":"CSAF","sourceUrl":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP"},{"url":"https://software.cisco.com"}],"tags":["csaf","vendor-advisory","cisco"],"epss":0.01656,"epssPercentile":0.75584,"ingestedAt":"2026-09-25T07:41:37.795Z","slug":"CVE-2021-1278","body":"## Overview\n\nMultiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nCisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.\n\n## Vendor advisories\n\n- **cisco-sa-sdwan-dosmulti-48jJuEUP** · Cisco · affected: Cisco SD-WAN vEdge Router, Cisco SD-WAN vEdge Cloud, Cisco 1000 Series Integrated Services Routers, Cisco ASR 1000 Series Aggregation Services Routers, Cisco 4000 Series Integrated Services Routers, Cisco Integrated Services Virtual Router, … · updated 2021-02-02 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP)\n\n**Cisco SD-WAN Denial of Service Vulnerabilities**. Released 2021-01-20, updated 2021-02-02.\n\nAffected:\n\n- Cisco SD-WAN vEdge Router\n- Cisco SD-WAN vEdge Cloud\n- Cisco 1000 Series Integrated Services Routers\n- Cisco ASR 1000 Series Aggregation Services Routers\n- Cisco 4000 Series Integrated Services Routers\n- Cisco Integrated Services Virtual Router\n- Cisco Cloud Services Router 1000V Series\n- Cisco Catalyst IR1100 Rugged Series Routers\n- Cisco IOS XE Software\n\n## Remediation\n\nCisco has released software updates that address this vulnerability. https://software.cisco.com","depth":"sunlit","depthScore":31,"depthScoreParts":{"impact":30.3,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}