cisco sd-wan vedge router vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv2

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. A...

Cisco Sd-wan Firmware Cisco Vedge Cloud Router -Cisco Vsmart Controller -

7.2

CVSSv2

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modi...

Cisco Sd-wan Vbond Orchestrator -Cisco Sd-wan Vedge Router -Cisco Sd-wan Solution -Cisco Sd-wan Vedge Cloud -Cisco Sd-wan Vsmart Controller Software -Cisco Catalyst Sd-wan Manager -Cisco Sd-wan

7.5

CVSSv2

A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to bypass certificate validation on an affected device. The vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by supplying a syst...

Cisco Sd-wan 18.3.0 Cisco Sd-wan

7.8

CVSSv2

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper processing of FTP traffic. An at...

Cisco Sd-wan Firmware 19.2.0 Cisco Sd-wan Firmware 19.2.1 Cisco Sd-wan Firmware 19.2.097 Cisco Sd-wan Firmware 19.2.098 Cisco Vedge Cloud Router -

6.1

CVSSv2

A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent malicious user to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient handling of malformed pack...

Cisco Sd-wan Firmware Cisco Vedge Cloud Router -

7.2

CVSSv2

A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local malicious user to escalate privileges and modify device configuration files. The vulnerability exists because user input is not properly sanitized for certain commands at the CLI. An...

Cisco Vedge 100 Firmware Cisco Vedge 1000 Firmware Cisco Vedge 2000 Firmware Cisco Vedge 5000 Firmware Cisco Vbond Orchestrator -Cisco Sd-wan Cisco Vmanage Network Management -Cisco Vsmart Controller -

7.2

CVSSv2

A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local malicious user to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the gro...

Cisco Vedge 100 Firmware Cisco Vedge 1000 Firmware Cisco Vedge 2000 Firmware Cisco Vedge 5000 Firmware Cisco Sd-wan Cisco Vsmart Controller -Cisco Vmanage Network Management -Cisco Vbond Orchestrator -

9

CVSSv2

A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affe...

Cisco Vedge 100 Firmware Cisco Vedge 1000 Firmware Cisco Vedge 2000 Firmware Cisco Vedge 5000 Firmware Cisco Sd-wan Cisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vsmart Controller -

7.2

CVSSv2

A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ex...

Cisco Vedge 100 Firmware Cisco Vedge 1000 Firmware Cisco Vedge 2000 Firmware Cisco Vedge 5000 Firmware Cisco Vbond Orchestrator -Cisco Vsmart Controller -Cisco Vedge Cloud Router Platform -Cisco Vmanage Network Management System -

7.2

CVSSv2

A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ex...

Cisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vedge-pro -Cisco Vsmart Controller -Cisco Vedge-plus -Cisco Vedge-100 Firmware Cisco Vedge 100b Firmware Cisco Vedge 100m Firmware Cisco Vedge 100wm Firmware Cisco Vedge-1000 Firmware Cisco Vedge-2000 Firmware Cisco Vedge-5000 Firmware

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook