CVE-2021-1301: Cisco Catalyst SD-WAN Manager

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Catalyst SD-WAN Manager: affected versions not specified
• Cisco IOS XE SD-WAN: affected versions not specified
• Cisco SD-WAN Firmware: version 18.3.8 only; version 18.4.4 only; version 19.2.1 only; version 19.2.99 only
• Cisco SD-WAN Vbond Orchestrator: affected versions not specified
• Cisco SD-WAN Vsmart Controller Firmware: any version

Published 2021-01-20. Last modified 2026-06-17.