CVE-2021-1513: Cisco Catalyst SD-WAN Manager

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected products

• Cisco Catalyst SD-WAN Manager: before 20.3.1 (fixed in 20.3.1); from 20.4, before 20.4.1 (fixed in 20.4.1); from 20.5, before 20.5.1 (fixed in 20.5.1)
• Cisco SD-WAN Vbond Orchestrator: affected versions not specified
• Cisco Vedge-100b Firmware: affected versions not specified
• Cisco Vedge 1000 Firmware: affected versions not specified
• Cisco Vedge 100 Firmware: affected versions not specified
• Cisco Vedge 100b Firmware: affected versions not specified
• Cisco Vedge 100m Firmware: affected versions not specified
• Cisco Vedge 100wm Firmware: affected versions not specified
• Cisco Vedge 2000 Firmware: affected versions not specified
• Cisco Vedge 5000 Firmware: affected versions not specified
• Cisco Vedge Cloud Firmware: affected versions not specified
• Cisco Vsmart Controller Firmware: affected versions not specified

Published 2021-05-06. Last modified 2026-06-17.