Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco vmanage network management system - vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2018-0432
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the err...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Vmanage Network Management System -
7.4
CVSSv3
CVE-2018-0434
A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote malicious user to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Vmanage Network Management System -
7.8
CVSSv3
CVE-2018-0433
A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local malicious user to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could ex...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Vbond Orchestrator -Cisco Vsmart Controller -Cisco Vedge Cloud Router Platform -Cisco Vmanage Network Management System -
8.8
CVSSv3
CVE-2018-0345
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to execute arbitrary commands with the privileges of the vmanage user in the configuration management system of the affected software. The...
Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
8.8
CVSSv3
CVE-2019-1650
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the save command in the CLI of the affe...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Sd-wanCisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vsmart Controller -
7.8
CVSSv3
CVE-2019-1648
A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local malicious user to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the gro...
Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 FirmwareCisco Sd-wanCisco Vsmart Controller -Cisco Vmanage Network Management -Cisco Vbond Orchestrator -
9.8
CVSSv3
CVE-2018-0349
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to overwrite arbitrary files on the underlying operating system of an affected device. The vulnerability is due to improper input validation of the request admin-tech command in the C...
Cisco Vmanage Network Management -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vsmart Controller -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
7.2
CVSSv3
CVE-2018-0344
A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to inject and execute arbitrary commands with vmanage user privileges on an affected system. The vulnerability is...
Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vbond Orchestrator -Cisco Vedge-plus -Cisco Vedge-pro -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
8.8
CVSSv3
CVE-2018-0343
A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote malicious user to execute arbitrary code with vmanage user privileges or cause a denial of service (DoS) condition on an affected system. The vulnerabilit...
Cisco Vedge-plus -Cisco Vmanage Network Management -Cisco Vsmart Controller -Cisco Vbond Orchestrator -Cisco Vedge-pro -Cisco Vedge-100 FirmwareCisco Vedge 100b FirmwareCisco Vedge 100m FirmwareCisco Vedge 100wm FirmwareCisco Vedge-1000 FirmwareCisco Vedge-2000 FirmwareCisco Vedge-5000 Firmware
7.8
CVSSv3
CVE-2020-3265
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local malicious user to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sendin...
Cisco Sd-wan FirmwareCisco Sd-wan Firmware 20.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook