Sd-wan (Cisco) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 85 known versions, newest CVE from 2023-09-27. Vendor: Cisco.

CVEs of Sd-wan

CVE-2023-20034 - CVSS 7.5 (high), 2023-09-27: Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to access the…
CVE-2023-20113 - CVSS 8.1 (high), 2023-03-23: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2022-20930 - CVSS 6.7 (medium), 2022-09-30: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected…
CVE-2022-20850 - CVSS 7.1 (high), 2022-09-30: A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete…
CVE-2022-20818 - CVSS 7.8 (high), 2022-09-30: Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities…
CVE-2022-20775 - CVSS 7.8 (high), 2022-09-30: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to…
CVE-2022-20844 - CVSS 5.3 (medium), 2022-09-30: A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an…
CVE-2022-20716 - CVSS 7.8 (high), 2022-04-15: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to…
CVE-2021-34726 - CVSS 6.7 (medium), 2021-09-23: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level…
CVE-2021-1612 - CVSS 7.1 (high), 2021-09-23: A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to overwrite arbitrary files on the local system. This…
CVE-2021-1589 - CVSS 6.5 (medium), 2021-09-23: A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to…
CVE-2021-1614 - CVSS 5.3 (medium), 2021-07-22: A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker…
CVE-2020-3593 - CVSS 7.8 (high), 2020-11-06: A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The…
CVE-2020-3600 - CVSS 7.8 (high), 2020-11-06: A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The…
CVE-2020-3595 - CVSS 7.8 (high), 2020-11-06: A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system.…
CVE-2020-3594 - CVSS 7.8 (high), 2020-11-06: A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The…
CVE-2020-27128 - CVSS 6.5 (medium), 2020-11-06: A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to…
CVE-2020-3536 - CVSS 6.4 (medium), 2020-10-08: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a cross-site…
CVE-2020-3375 - CVSS 9.8 (critical), 2020-07-31: A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The…
CVE-2020-3374 - CVSS 9.9 (critical), 2020-07-31: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization,…
CVE-2020-3180 - CVSS 8.4 (high), 2020-07-16: A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a…
CVE-2019-1624 - CVSS 8.8 (high), 2019-06-20: A vulnerability in the vManage web-based UI (Web UI) in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands…
CVE-2019-1647 - CVSS 8 (high), 2019-01-24: A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, adjacent attacker to bypass authentication and have direct unauthorized access to…
CVE-2019-1646 - CVSS 7.8 (high), 2019-01-24: A vulnerability in the local CLI of the Cisco SD-WAN Solution could allow an authenticated, local attacker to escalate privileges and modify device…
CVE-2019-1650 - CVSS 8.8 (high), 2019-01-24: A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying operating system of…
CVE-2019-1648 - CVSS 7.8 (high), 2019-01-24: A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated, local attacker to gain elevated privileges on an…
CVE-2018-15387 - CVSS 9.8 (critical), 2018-10-05: A vulnerability in the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass certificate validation on an affected device. The…