cisco sd-wan manager vulnerabilities and exploits

(subscribe to this query)

NA

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote malicious user to retrieve arbitrary files from an affected system. This vulnerability is due to improper validation of parameters that are sent to the web UI. An attacker could ex...

NA

A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to gain read and write access to information that is stored on an affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries...

NA

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote malicious user to conduct path traversal attacks and obtain read access to sensitive files on an affected system. The vulnerability is due to insufficient v...

NA

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local malicious user to bypass authorization and allow the malicious user to roll back the configuration on vManage controllers and edge router device. T...

Cisco Sd-wan Vmanage Cisco Sd-wan Vmanage 20.10 Cisco Catalyst Sd-wan Manager 20.9 Cisco Catalyst Sd-wan Manager 20.11 Cisco Catalyst Sd-wan Manager 20.8 Cisco Catalyst Sd-wan Manager 20.7

NA

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote malicious user to cause a process crash, resulting in a DoS condition for SSH access only. This vulnerability does not prevent the system from continuing to function, and we...

Cisco Sd-wan Vmanage 20.12 Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager

NA

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabi...

Cisco Sd-wan Vbond Orchestrator Cisco Sd-wan Vbond Orchestrator 20.8 Cisco Sd-wan Vsmart Controller 20.8 Cisco Sd-wan Vsmart Controller Cisco Catalyst Sd-wan Manager 20.8 Cisco Catalyst Sd-wan Manager Cisco Sd-wan Cisco Sd-wan 20.8

NA

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote malicious user to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance...

Cisco Sd-wan Vmanage Cisco Catalyst Sd-wan Manager 20.6.3.3 Cisco Catalyst Sd-wan Manager

1 Article

NA

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote malicious user to access the Elasticsearch configuration database of an affected device with the privileges of the elasticsearch user. These vulnerabili...

Cisco Sd-wan Cisco Sd-wan 20.7 Cisco Sd-wan 20.6

7.2

CVSSv2

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modi...

Cisco Sd-wan Vbond Orchestrator -Cisco Sd-wan Vedge Router -Cisco Sd-wan Solution -Cisco Sd-wan Vedge Cloud -Cisco Sd-wan Vsmart Controller Software -Cisco Catalyst Sd-wan Manager -Cisco Sd-wan

NA

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote malicious user to gain unauthorized access to the application as an arbitrary user. This vulnerability is due to improper authent...

Cisco Catalyst Sd-wan Manager 20.9.3.2 Cisco Catalyst Sd-wan Manager 20.11.1.2

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook