Sd-wan Firmware (Cisco) - vulnerabilities (CVEs)

41 CVEs, 0 in the last 30 days, 51 known versions, newest CVE from 2021-01-20. Vendor: Cisco.

CVEs of Sd-wan Firmware

CVE-2021-1241 - CVSS 8.6 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an…
CVE-2021-1233 - CVSS 4.4 (medium), 2021-01-20: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The…
CVE-2021-1305 - CVSS 8.8 (high), 2021-01-20: Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass…
CVE-2021-1279 - CVSS 8.6 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an…
CVE-2021-1300 - CVSS 9.8 (critical), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more…
CVE-2021-1278 - CVSS 8.6 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an…
CVE-2021-1299 - CVSS 8.8 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2021-1298 - CVSS 8.8 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2021-1301 - CVSS 9.8 (critical), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more…
CVE-2021-1273 - CVSS 8.6 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an…
CVE-2021-1263 - CVSS 8.1 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2021-1274 - CVSS 8.6 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an…
CVE-2021-1260 - CVSS 8.1 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2021-1262 - CVSS 8.1 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2021-1261 - CVSS 8.1 (high), 2021-01-20: Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which…
CVE-2020-3388 - CVSS 7.8 (high), 2020-07-16: A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with…
CVE-2020-3406 - CVSS 6.4 (medium), 2020-07-16: A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a…
CVE-2020-3387 - CVSS 8.8 (high), 2020-07-16: A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to execute code with root privileges on an affected system. The…
CVE-2020-3405 - CVSS 7.3 (high), 2020-07-16: A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that…
CVE-2020-3468 - CVSS 5.4 (medium), 2020-07-16: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection…
CVE-2020-3385 - CVSS 7.4 (high), 2020-07-16: A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, adjacent attacker to cause a denial…
CVE-2020-3401 - CVSS 6.5 (medium), 2020-07-16: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal…
CVE-2020-3437 - CVSS 6.5 (medium), 2020-07-16: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files…
CVE-2020-3372 - CVSS 6.5 (medium), 2020-07-16: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to consume excessive…
CVE-2020-3381 - CVSS 8.8 (high), 2020-07-16: A vulnerability in the web management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct directory traversal…
CVE-2020-3369 - CVSS 8.6 (high), 2020-07-16: A vulnerability in the deep packet inspection (DPI) engine of Cisco SD-WAN vEdge Routers could allow an unauthenticated, remote attacker to cause a denial of…
CVE-2020-3379 - CVSS 7.8 (high), 2020-07-16: A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying…
CVE-2020-3378 - CVSS 4.3 (medium), 2020-07-16: A vulnerability in the web-based management interface for Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to impact the integrity…
CVE-2020-3351 - CVSS 8.6 (high), 2020-07-16: A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The…
CVE-2020-3265 - CVSS 7.8 (high), 2020-03-19: A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating…
CVE-2020-3264 - CVSS 7.1 (high), 2020-03-19: A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The…
CVE-2020-3266 - CVSS 7.8 (high), 2020-03-19: A vulnerability in the CLI of Cisco SD-WAN Solution software could allow an authenticated, local attacker to inject arbitrary commands that are executed with…
CVE-2019-16010 - CVSS 5.5 (medium), 2020-03-19: A vulnerability in the web UI of the Cisco SD-WAN vManage software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…
CVE-2019-16012 - CVSS 8.1 (high), 2020-03-19: A vulnerability in the web UI of Cisco SD-WAN Solution vManage software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…
CVE-2020-3115 - CVSS 8.8 (high), 2020-01-26: A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level…
CVE-2019-12629 - CVSS 7.2 (high), 2020-01-26: A vulnerability in the WebUI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject and execute arbitrary commands with vmanage…
CVE-2019-12619 - CVSS 6.5 (medium), 2020-01-26: A vulnerability in the web interface for Cisco SD-WAN Solution vManage could allow an authenticated, remote attacker to impact the integrity of an affected…
CVE-2019-16002 - CVSS 6.5 (medium), 2019-11-26: A vulnerability in the vManage web-based UI (web UI) of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site…
CVE-2019-1951 - CVSS 5.8 (medium), 2019-08-08: A vulnerability in the packet filtering features of Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to bypass L3 and L4 traffic filters.…
CVE-2019-1626 - CVSS 8.8 (high), 2019-06-20: A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on…
CVE-2019-1625 - CVSS 7.8 (high), 2019-06-20: A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an…