Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco sd-wan 20.8 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2022-20775
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabi...
Cisco Sd-wan Vbond OrchestratorCisco Sd-wan Vbond Orchestrator 20.8Cisco Sd-wan Vsmart Controller 20.8Cisco Sd-wan Vsmart ControllerCisco Catalyst Sd-wan Manager 20.8Cisco Catalyst Sd-wan ManagerCisco Sd-wanCisco Sd-wan 20.8
5.5
CVSSv3
CVE-2023-20253
A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local malicious user to bypass authorization and allow the malicious user to roll back the configuration on vManage controllers and edge router device. T...
Cisco Sd-wan VmanageCisco Sd-wan Vmanage 20.10Cisco Catalyst Sd-wan Manager 20.9Cisco Catalyst Sd-wan Manager 20.11Cisco Catalyst Sd-wan Manager 20.8Cisco Catalyst Sd-wan Manager 20.7
6.7
CVSSv3
CVE-2022-20930
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by inject...
Cisco Sd-wan Vbond Orchestrator 20.8Cisco Sd-wan Vsmart Controller 20.8Cisco Sd-wan Vsmart ControllerCisco Sd-wan VmanageCisco Sd-wan Vbond OrchestratorCisco Sd-wan Vbond Orchestrator 20.9Cisco Sd-wan Vsmart Controller 20.9Cisco Catalyst Sd-wan Manager 20.9Cisco Catalyst Sd-wan Manager 20.8Cisco Sd-wanCisco Sd-wan 20.8Cisco Sd-wan 20.9
10
CVSSv3
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook