cisco sd-wan firmware vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly valida...

Cisco Sd-wan Firmware

5.4

CVSSv3

A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability exists because the web-based management...

Cisco Sd-wan Firmware

7.3

CVSSv3

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries...

Cisco Sd-wan Firmware

6.5

CVSSv3

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker...

Cisco Sd-wan Firmware

6.5

CVSSv3

A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the w...

Cisco Sd-wan Firmware

5.8

CVSSv3

A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to bypass L3 and L4 traffic filters. The vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit ...

Cisco Sd-wan Firmware

7.2

CVSSv3

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to...

Cisco Rv320 Firmware 1.4.2.15 Cisco Rv325 Firmware 1.4.2.15

2 EDB exploits2 Metasploit modules2 Github repositories2 Articles

7.5

CVSSv3

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote malicious user to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An at...

Cisco Rv320 Firmware 1.4.2.17 Cisco Rv320 Firmware 1.4.2.15 Cisco Rv325 Firmware 1.4.2.17 Cisco Rv325 Firmware 1.4.2.15

2 EDB exploits2 Metasploit modules7 Github repositories2 Articles

10

CVSSv3

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1151 Github repositories28 Articles

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook