---
id: CVE-2021-1278
title: Cisco SD-WAN Denial of Service Vulnerabilties
summary: "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.\r\n\r\nFor more information about these vulnerabilities, see the Details […"
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'
cvssSource: vendor
vendor: Cisco
product: Cisco 4000 Series Integrated Services Routers
affected:
  - sd_wan_vedge_router
  - sd_wan_vedge_cloud
  - 1000_series_integrated_services_routers
  - asr_1000_series_aggregation_services_routers
  - 4000_series_integrated_services_routers
  - integrated_services_virtual_router
  - cloud_services_router_1000v_series
  - catalyst_ir1100_rugged_series_routers
  - ios_xe_software
published: '2021-01-20'
updated: '2021-02-02'
sourceUpdated: '2021-02-02T22:21:54+00:00'
source: CSAF
sourceUrl: >-
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP
  - url: 'https://software.cisco.com'
tags:
  - csaf
  - vendor-advisory
  - cisco
epss: 0.01656
epssPercentile: 0.75584
ingestedAt: '2026-09-25T07:41:37.795Z'
---

## Overview

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

## Vendor advisories

- **cisco-sa-sdwan-dosmulti-48jJuEUP** · Cisco · affected: Cisco SD-WAN vEdge Router, Cisco SD-WAN vEdge Cloud, Cisco 1000 Series Integrated Services Routers, Cisco ASR 1000 Series Aggregation Services Routers, Cisco 4000 Series Integrated Services Routers, Cisco Integrated Services Virtual Router, … · updated 2021-02-02 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP)

**Cisco SD-WAN Denial of Service Vulnerabilities**. Released 2021-01-20, updated 2021-02-02.

Affected:

- Cisco SD-WAN vEdge Router
- Cisco SD-WAN vEdge Cloud
- Cisco 1000 Series Integrated Services Routers
- Cisco ASR 1000 Series Aggregation Services Routers
- Cisco 4000 Series Integrated Services Routers
- Cisco Integrated Services Virtual Router
- Cisco Cloud Services Router 1000V Series
- Cisco Catalyst IR1100 Rugged Series Routers
- Cisco IOS XE Software

## Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com