cisco sd-wan solution - vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv2

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modi...

Cisco Sd-wan Vbond Orchestrator -Cisco Sd-wan Vedge Router -Cisco Sd-wan Solution -Cisco Sd-wan Vedge Cloud -Cisco Sd-wan Vsmart Controller Software -Cisco Catalyst Sd-wan Manager -Cisco Sd-wan

10

CVSSv2

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote malicious user to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted tra...

Cisco Sd-wan Cisco Ios Xe Sd-wan

7.8

CVSSv2

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. A...

Cisco Sd-wan Firmware Cisco Vedge Cloud Router -Cisco Vsmart Controller -

9

CVSSv2

A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ...

Cisco Sd-wan

7.2

CVSSv2

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local malicious user to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software ha...

Cisco Sd-wan

7.2

CVSSv2

A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local malicious user to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker co...

Cisco Sd-wan Firmware 18.4.1 Cisco Sd-wan Firmware 19.1.0

7.2

CVSSv2

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local malicious user to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability ...

Cisco Sd-wan Firmware Cisco Vbond Orchestrator -Cisco Vsmart Controller -

7.5

CVSSv2

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a syst...

Cisco Sd-wan 18.3.0 Cisco Sd-wan

6.5

CVSSv2

A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the...

Cisco Sd-wan Firmware

7.7

CVSSv2

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent malicious user to bypass authentication and have direct unauthorized access to other vSmart containers. The vulnerability is due to an insecure default configuration of the affected system. An att...

Cisco Sd-wan Cisco Vsmart Controller -

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook