CVE-2021-1431: Cisco IOS XE

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected products

• Cisco IOS XE: version 3.15.1xbs only; version 3.15.2xbs only; version 16.11.1 only; version 16.11.1a only; version 16.11.1b only; version 16.11.1c only; …

Published 2021-03-24. Last modified 2026-06-17.