{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:03:54Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-sdwan-esc-rSNVvTf9","slug":"cisco-sa-sdwan-esc-rsnvvtf9","vendor":"Cisco","title":"Cisco IOS XE SD-WAN Software Console Privilege Escalation Vulnerability","summary":"A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An attacker could exploit this vulnerability by connecting to the console port and authenticating as a read-only user. A successful exploit could allow a user with read-only permissions to access administrative privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","severity":"Medium","published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9/csaf/cisco-sa-sdwan-esc-rSNVvTf9.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":8,"public_evidence_count":8,"kev_count":0,"highest_epss":0.00254},"cves":[{"id":"CVE-2021-1371","kev":false,"epss":{"score":0.00254,"percentile":0.16919,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"}}],"public_evidence":[{"product":{"name":"Cisco 1000 Series Integrated Services Routers","slug":"cisco-1000-series-integrated-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.2 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3a when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3b when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.4 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.5 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.6 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 1000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 1000 Series Integrated Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":1},{"product":{"name":"Cisco ASR 1000 Series Aggregation Services Routers","slug":"cisco-asr-1000-series-aggregation-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.2 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3a when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3b when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.4 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.5 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.6 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco ASR 1000 Series Aggregation Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco ASR 1000 Series Aggregation Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":2},{"product":{"name":"Cisco 4000 Series Integrated Services Routers","slug":"cisco-4000-series-integrated-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.2 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3a when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.3b when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.4 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.5 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.10.6 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.4a when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 4000 Series Integrated Services Routers; Cisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 4000 Series Integrated Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":3},{"product":{"name":"Cisco Integrated Services Virtual Router","slug":"cisco-integrated-services-virtual-router","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.2 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.3 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.3a when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.3b when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.4 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.5 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.10.6 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.4a when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco Integrated Services Virtual Router; Cisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco Integrated Services Virtual Router","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":4},{"product":{"name":"Cisco Cloud Services Router 1000V Series","slug":"cisco-cloud-services-router-1000v-series","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.10.3a when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.10.3b when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.10.4 when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.10.5 when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.10.6 when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.4a when installed on Cisco Cloud Services Router 1000V Series; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco Cloud Services Router 1000V Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":5},{"product":{"name":"Cisco Catalyst IR1100 Rugged Series Routers","slug":"cisco-catalyst-ir1100-rugged-series-routers","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IOS XE Catalyst SD-WAN 16.12.1b when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1d when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.1e when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.2r when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.3 when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.4 when installed on Cisco Catalyst IR1100 Rugged Series Routers; Cisco IOS XE Catalyst SD-WAN 16.12.5 when installed on Cisco Catalyst IR1100 Rugged Series Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":6},{"product":{"name":"Cisco IOS XE Catalyst SD-WAN","slug":"cisco-ios-xe-catalyst-sd-wan","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"16.10.1; 16.10.2; 16.10.3; 16.11.1a; 16.11.1b; 16.12.3; 16.12.4; 16.12.4a; 16.9.1; 16.9.2; 16.9.3; 16.9.4","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":7},{"product":{"name":"Cisco IOS XE Software","slug":"cisco-ios-xe-software","vendor":"Cisco"},"cve":{"id":"CVE-2021-1371"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T00:56:22Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"16.11.1; 16.11.1c; 16.11.1s; 16.11.2; 16.12.1; 16.12.1a; 16.12.1c; 16.12.1s; 16.12.1t; 16.12.1w; 16.12.1x; 16.12.1y; 16.12.1z; 16.12.1z1; 16.12.1z2; 16.12.2; 16.12.2a; 16.12.2s; 16.12.2t; 16.12.3a; 16.12.3s; 17.1.1; 17.1.1a; 17.1.1s; 17.1.1t; 17.1.2; 17.1.3; 17.11.99SW; 17.2.1; 17.2.1a; 17.2.1r; 17.2.1v; 17.2.2; 17.3.1; 17.3.1a; 17.3.1w; 17.3.1x; 17.3.1z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00254,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:34Z"},"published_at":"2021-03-24T16:00:00Z","updated_at":"2021-03-24T16:00:00Z","advisory_updated_at":"2021-03-24T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9"},"row_display_order":8}]}