{"vulnerability": "cve-2021-1479", "sightings": [{"uuid": "c0820918-5fa2-4171-8dc6-8de3067822fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/true_secator/1617", "content": "Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SD-WAN, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f.\n\nCVE-2021-1479 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f vManage, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u0438\u0437 10 \u043f\u043e CVSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 (RCE) \u0441 \u0440\u0443\u0442\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n\u0418 \u0445\u043e\u0442\u044f Cisco \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435  \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430, \u043c\u044b \u0436\u0435 \u043f\u043e\u043c\u043d\u0438\u043c \u043f\u0440\u043e \u0437\u043e\u043b\u043e\u0442\u044b\u0435 72 \u0447\u0430\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043d\u0430 \u0440\u0435\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433 \u043f\u0430\u0442\u0447\u0430 \u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0443 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u041f\u0435\u0440\u0435\u0436\u0438\u0432\u0430\u0435\u043c \u0437\u0430 \u041b\u0443\u043a\u0430\u0446\u043a\u043e\u0433\u043e...", "creation_timestamp": "2021-04-08T14:36:00.000000Z"}, {"uuid": "af68130d-6b7d-42a4-9e71-01f28ab48b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/true_secator/1684", "content": "\u200b\u200b\u041c\u0435\u0441\u044f\u0446\u0430 \u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0441 \u0442\u043e\u0433\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043a\u0430\u043a Cisco \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-1479 \u0432 SD-WAN vManage, \u0430 \u043d\u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u0435 \u0443\u0436\u0435 \u0441\u0432\u0435\u0436\u0438\u0435.\n\n\u041f\u043e\u0437\u0430\u0432\u0447\u0435\u0440\u0430 Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u044b\u0440\u043e\u043a \u0432 SD-WAN vManage, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 (RCE) \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0410 \u0432 \u0434\u043e\u0432\u0435\u0441\u043e\u043a \u043a \u044d\u0442\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0438 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 HyperFlex HX, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0435 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434, \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0427\u0442\u043e-\u0442\u043e \u043a\u0443\u0447\u043d\u043e \u043f\u043e\u0448\u043b\u043e. \u041f\u0435\u0440\u0435\u0436\u0438\u0432\u0430\u0435\u043c \u0437\u0430 \u041b\u0443\u043a\u0430\u0446\u043a\u043e\u0433\u043e...", "creation_timestamp": "2021-05-06T12:28:00.000000Z"}, {"uuid": "571d5f1e-d2b1-4ecd-9573-ee203ce00c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-01T20:02:47.581858Z"}, {"uuid": "53536b92-6f2a-475f-9972-c85dcc79cb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4296", "content": "The most serious of the bugs (CVE-2021-1479) impacts Cisco\u2019 SD-WAN vManage software. It allows unauthenticated attackers to trigger a buffer overflow attack. See Also: Hacking Stories: When two young hackers played war games with Pentagon\u201cThe vulnerability is due to improper validation of user-supplied input to the vulnerable component. An attacker could exploit this vulnerability by sending a crafted connection request to the vulnerable component that, when processed, could cause a buffer overflow condition. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges,\u201d Cisco describes.\n\nCisco has released patches for vulnerabilities impacting its SD-WAN vManage Software. The other two CVE records (CVE-2021-1137 and CVE-2021-1480) are rated high-severity also have patches available.\n\n\u201c[These] vulnerabilities affect Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software,\u201d Cisco wrote. It added, it was unaware of any known public exploits tied to these three vulnerabilities. The vulnerability disclosures were part of a larger disclosure of bugs and fixes that totaled 16 flaws ranging\u00a0from critical, high severity to medium.\nSource: threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/google-play-90x90.jpg Fake Netflix App on Google Play Spreads Malware Via WhatsApp1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/vmware-patch-90x90.jpg Critical Cloud Bug in VMWare Carbon Black Allows Takeover2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/eggs-chickens-e1617650984482-90x90.jpg LinkedIn Spear-Phishing Campaign Targets Job Hunters3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/pf9bzNs3hHRgAcgDQTPPa3-1200-80-90x90.jpg Facebook data on 533 million users posted online4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/NAS-Bug-90x90.jpg Legacy QNAP NAS Devices Vulnerable to Zero-Day Attack7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/iphone-privacy-90x90.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Monero-Mining-90x90.png Malicious Docker Cryptomining Images Rack Up 20M Downloads1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/phph-90x90.jpg PHP Infiltrated with Backdoor Malware1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ransomware_global_small-90x90.jpg Insurance Giant CNA Hit with Novel Ransomware Attack2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Microsoft-Teams-90x90.jpg Microsoft Offers Up To $30K For Teams Bugs2 weeks ago\nThe post Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-01T20:02:47.362763Z"}, {"uuid": "bc744e95-e71d-457f-a120-0e003031b7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4296", "content": "The most serious of the bugs (CVE-2021-1479) impacts Cisco\u2019 SD-WAN vManage software. It allows unauthenticated attackers to trigger a buffer overflow attack. See Also: Hacking Stories: When two young hackers played war games with Pentagon\u201cThe vulnerability is due to improper validation of user-supplied input to the vulnerable component. An attacker could exploit this vulnerability by sending a crafted connection request to the vulnerable component that, when processed, could cause a buffer overflow condition. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges,\u201d Cisco describes.\n\nCisco has released patches for vulnerabilities impacting its SD-WAN vManage Software. The other two CVE records (CVE-2021-1137 and CVE-2021-1480) are rated high-severity also have patches available.\n\n\u201c[These] vulnerabilities affect Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software,\u201d Cisco wrote. It added, it was unaware of any known public exploits tied to these three vulnerabilities. The vulnerability disclosures were part of a larger disclosure of bugs and fixes that totaled 16 flaws ranging\u00a0from critical, high severity to medium.\nSource: threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/google-play-90x90.jpg Fake Netflix App on Google Play Spreads Malware Via WhatsApp1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/vmware-patch-90x90.jpg Critical Cloud Bug in VMWare Carbon Black Allows Takeover2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/eggs-chickens-e1617650984482-90x90.jpg LinkedIn Spear-Phishing Campaign Targets Job Hunters3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/pf9bzNs3hHRgAcgDQTPPa3-1200-80-90x90.jpg Facebook data on 533 million users posted online4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/NAS-Bug-90x90.jpg Legacy QNAP NAS Devices Vulnerable to Zero-Day Attack7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/iphone-privacy-90x90.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Monero-Mining-90x90.png Malicious Docker Cryptomining Images Rack Up 20M Downloads1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/phph-90x90.jpg PHP Infiltrated with Backdoor Malware1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ransomware_global_small-90x90.jpg Insurance Giant CNA Hit with Novel Ransomware Attack2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Microsoft-Teams-90x90.jpg Microsoft Offers Up To $30K For Teams Bugs2 weeks ago\nThe post Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-02T01:03:23.597177Z"}, {"uuid": "ed101d1a-a34c-4135-8482-3e1c0ad9ae8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-02T01:03:23.820769Z"}, {"uuid": "73679540-65b5-4a56-b2d9-5636a27e31f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-08T11:00:05.207701Z"}, {"uuid": "9200df3f-4929-4302-aacd-1c897716e77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4296", "content": "The most serious of the bugs (CVE-2021-1479) impacts Cisco\u2019 SD-WAN vManage software. It allows unauthenticated attackers to trigger a buffer overflow attack. See Also: Hacking Stories: When two young hackers played war games with Pentagon\u201cThe vulnerability is due to improper validation of user-supplied input to the vulnerable component. An attacker could exploit this vulnerability by sending a crafted connection request to the vulnerable component that, when processed, could cause a buffer overflow condition. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges,\u201d Cisco describes.\n\nCisco has released patches for vulnerabilities impacting its SD-WAN vManage Software. The other two CVE records (CVE-2021-1137 and CVE-2021-1480) are rated high-severity also have patches available.\n\n\u201c[These] vulnerabilities affect Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software,\u201d Cisco wrote. It added, it was unaware of any known public exploits tied to these three vulnerabilities. The vulnerability disclosures were part of a larger disclosure of bugs and fixes that totaled 16 flaws ranging\u00a0from critical, high severity to medium.\nSource: threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/google-play-90x90.jpg Fake Netflix App on Google Play Spreads Malware Via WhatsApp1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/vmware-patch-90x90.jpg Critical Cloud Bug in VMWare Carbon Black Allows Takeover2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/eggs-chickens-e1617650984482-90x90.jpg LinkedIn Spear-Phishing Campaign Targets Job Hunters3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/pf9bzNs3hHRgAcgDQTPPa3-1200-80-90x90.jpg Facebook data on 533 million users posted online4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/NAS-Bug-90x90.jpg Legacy QNAP NAS Devices Vulnerable to Zero-Day Attack7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/iphone-privacy-90x90.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Monero-Mining-90x90.png Malicious Docker Cryptomining Images Rack Up 20M Downloads1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/phph-90x90.jpg PHP Infiltrated with Backdoor Malware1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ransomware_global_small-90x90.jpg Insurance Giant CNA Hit with Novel Ransomware Attack2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Microsoft-Teams-90x90.jpg Microsoft Offers Up To $30K For Teams Bugs2 weeks ago\nThe post Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-08T11:00:05.412299Z"}, {"uuid": "d72c9856-b1e5-4b49-af30-d880daa07e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-09T00:00:31.981312Z"}, {"uuid": "3ba9ec6b-f66f-4151-85b5-e1d105bbe5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1479", "type": "seen", "source": "https://t.me/hacking_Attack/4296", "content": "The most serious of the bugs (CVE-2021-1479) impacts Cisco\u2019 SD-WAN vManage software. It allows unauthenticated attackers to trigger a buffer overflow attack. See Also: Hacking Stories: When two young hackers played war games with Pentagon\u201cThe vulnerability is due to improper validation of user-supplied input to the vulnerable component. An attacker could exploit this vulnerability by sending a crafted connection request to the vulnerable component that, when processed, could cause a buffer overflow condition. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges,\u201d Cisco describes.\n\nCisco has released patches for vulnerabilities impacting its SD-WAN vManage Software. The other two CVE records (CVE-2021-1137 and CVE-2021-1480) are rated high-severity also have patches available.\n\n\u201c[These] vulnerabilities affect Cisco devices if they are running a vulnerable release of Cisco SD-WAN vManage Software,\u201d Cisco wrote. It added, it was unaware of any known public exploits tied to these three vulnerabilities. The vulnerability disclosures were part of a larger disclosure of bugs and fixes that totaled 16 flaws ranging\u00a0from critical, high severity to medium.\nSource: threatpost.com (Click Link)style=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/google-play-90x90.jpg Fake Netflix App on Google Play Spreads Malware Via WhatsApp1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/vmware-patch-90x90.jpg Critical Cloud Bug in VMWare Carbon Black Allows Takeover2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/eggs-chickens-e1617650984482-90x90.jpg LinkedIn Spear-Phishing Campaign Targets Job Hunters3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/pf9bzNs3hHRgAcgDQTPPa3-1200-80-90x90.jpg Facebook data on 533 million users posted online4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/NAS-Bug-90x90.jpg Legacy QNAP NAS Devices Vulnerable to Zero-Day Attack7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/04/iphone-privacy-90x90.jpg Apple, Google Both Track Mobile Telemetry Data, Despite Users Opting Out1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Monero-Mining-90x90.png Malicious Docker Cryptomining Images Rack Up 20M Downloads1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/phph-90x90.jpg PHP Infiltrated with Backdoor Malware1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/ransomware_global_small-90x90.jpg Insurance Giant CNA Hit with Novel Ransomware Attack2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/03/Microsoft-Teams-90x90.jpg Microsoft Offers Up To $30K For Teams Bugs2 weeks ago\nThe post Zero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-09T00:00:32.160345Z"}]}